Aeternum Moves C2 to Polygon Blockchain, Outsmarting Takedowns
Unit 42 uncovered Aeternum, a C++ loader that stores encrypted C2 commands in Polygon smart contracts and pulls them via public RPC endpoints. By moving the entire command channel on‑chain, the botnet sidesteps traditional domain‑based takedowns and forces defenders to monitor blockchain traffic. The finding forces security teams to add blockchain‑awareness to their detection playbooks.