Internet Computer canisters as malware dead drops

Attackers used an Internet Computer (a blockchain‑based hosting environment) canister to host pointers to next‑stage payloads, marking the first publicly documented case of a canister being used explicitly to fetch command‑and‑control servers. That technique lets attackers place a resilient, decentralised dead‑drop that is harder to takedown and can be used to modularize multi‑stage supply‑chain malware. — If decentralised hosting (canisters) becomes a reliable C2/dead‑drop vector, law enforcement, registries, and platform maintainers face new takedown and attribution challenges that change how supply‑chain incidents are investigated and mitigated.