Hackers use public blockchains as C2 channels for supply chain malware, evading domain blocks and stealing cloud credentials.