# Chainalysis reports rise in malware using blockchains for instructions

_Published Tuesday, September 29, 2026 at 12:07 PM EDT · Security · Latest · Tier 2 — Notable_

![Figure in front of a PC — Primary](https://cdn.mos.cms.futurecdn.net/Fm3i5qGB3w2LfBR3ETDgmc-1600-80.jpg)

Blockchain-assisted cyberattack activity rose more than fivefold from last year, according to Chainalysis findings reported by Tom's Hardware.

Attackers place malicious code or directions to their servers in blockchain transactions and smart contracts, where infected devices can retrieve them even if conventional hosting is taken down. Chainalysis tracked activity across five major blockchains and more than a dozen malware strains. It attributed much of the increase to North Korean and Iranian state-linked actors and Russian-speaking groups.

The blockchain data can sustain an attacker's instructions, but malware still has to reach and run on a victim's device first.

## Sources

- [Tom's Hardware](https://www.tomshardware.com/tech-industry/cyber-security/blockchain-assisted-cyberattacks-surge-fivefold-driven-by-iranian-and-north-korean-state-actors-russia-linked-groups-open-weight-llms-are-linked-to-an-increase-in-attacks)

---
Canonical: https://techandbusiness.org/newswire/mp-wySc9kcczUuhludigz5
Published: 2026-09-29T16:07:54.371Z
Story chronology: 2026-09-29T14:10:00.000Z
Retrieved: 2026-09-29T18:47:09.726Z
Publisher: Tech & Business (techandbusiness.org)