Decentralized Malware on The Blockchain
summary
Claim: arbitrary binaries can be stored in transactions and reconstructed and executed by a tiny loader that pulls wallet IDs from a block, concatenates their data and runs it in memory — demonstrator fetches a metasploit shellcode, spawns Notepad and succeeds. Implementation uses standard Bitcoin transactions, paid about 0.002 BTC per upload, waits ~11 minutes for confirmation, and can spread payload across many outputs within the 1MB block limit. Blockchain size grows (≈7GB to ≈25GB in a year), so permanent data bloat and encrypted payload marketplaces are practical threats.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:25What is Interpol
- 3:33What do you do
- 4:47APT Research
- 5:50APT Research Projects
- 8:10Crypto Universe
- 8:38Vulnerability Disclosure
- 9:39What is Blockchain
- 10:13The beauty of Blockchain
- 11:12Blockchain explained
- 16:25Blockchain examples
- 20:13Data on the blockchain
- 25:05Demo
- 33:35Conclusions
- 35:31Solutions
- 38:31Interpol
- 39:19Pollution
- 41:58Twitterbased model
- 45:32Other questions
related talks
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
41mBlockchain and cryptocurrencies - a deep dive
25mMOVE, Enabling the Next Object Based Blockchains
19mMine Blockchain
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
40mThe Lunacy of Web3
53mProtecting Crypto Exchanges From A New Wave Of MitB Attacks
01h 00mBitcoin and Blockchain overview