FileFix Series — Most Significant TTP 2026: Command-and-Control Beaconing to Blockchain RPC Endpoints (EtherHiding Technique)
A July 2026 incident used Polygon smart contracts (EtherHiding) for dynamic payload routing/C2 following a ClickFix/FileFix-style lure driven by compromised WordPress credentials.
Microsoft Sentinel (KQL)

