Trojanized Ethereum installer execution (KREMLIN/REF9334)

Ankit Mehta@Secvyn

•updated Sep 16, 2026•0•0•1

This rule monitors for the execution of a process that matches a specific SHA256 file hash identified as malicious.