Hackers use Web3 smart contracts to control cloud supply chain malware

Hackers are using Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments, Unit 42 reported. The group explained that attackers have upgraded their command-and-control infrastructure beyond static endpoints hardcoded into malware binaries. [1]

Unit 42 said attackers now use Web3 smart contracts to dynamically update entire botnets and worm network infrastructures through a single smart contract transaction. These techniques allow attackers to manage malware resilience inside cloud supply chains. [1]

A supply chain attack targets less secure elements in software or hardware to breach target organizations across government, financial, and industrial sectors. Web3 incorporates concepts such as decentralization and blockchain technologies, which were coined by Ethereum co-founder Gavin Wood in 2014. [3][5]

Supply chain risks also extend to government systems. InfoSecurity Magazine reported that a breach of third-party access compromised personal information for 8.8 million citizens in the Danish Central Register of Persons after officials observed irregular behavior on October 2, 2026. [2]