Glassworm - Solana RPC Node C2 Polling

Ibrahim Saud@tektrix

•updated Jun 20, 2026•3•0•3

Identifies the Node/Python payload initiating outbound queries to Solana RPC nodes to fetch encoded C2 instructions hidden in blockchain transaction memos.