A new malware known as EtherRAT is using Ethereum smart contracts to hide its command and control (C2) infrastructure, making it difficult for security systems to detect. The malware employs a technique called EtherHiding, which allows it to obscure its activities within the blockchain. Once deployed, EtherRAT can steal cryptocurrency wallets and sensitive credentials from infected devices. This poses a significant risk to users involved in cryptocurrency transactions, as they may unknowingly expose their assets to attackers. Researchers are warning that as this malware evolves, more users could fall victim to theft and fraud, particularly in the growing landscape of decentralized finance.