ClearFake Etherhiding RPC Activity

Ibrahim Saud@tektrix

•updated Jun 17, 2026•1•0•6

Detects network connections to 'bsc-testnet.drpc.org', which has been associated with ClearFake and Etherhiding malware campaigns. This domain is used for command and control or data exfiltration related to these threats.