EtherHiding: JSON-RPC eth_call to ErrTraffic Polygon C2-resolution contract

Ibrahim Saud@tektrix

•updated Sep 22, 2026•0•0•3

Detects network activity associated with the ErrTraffic malware, specifically targeting JSON-RPC 'eth_call' requests to Polygon blockchain smart contracts used for C2 resolution and subsequent DNS queries to known malicious domains used for C2 infrastructure.