Microsoft: Hackers Are Using BNB Chain to Launch ClickFix Malware Attacks

TLDR

• Microsoft has identified a malware campaign using BNB Smart Chain to hide and distribute malicious code
• Hackers inject JavaScript into legitimate websites, linking to smart contracts that store attack instructions
• Victims are tricked into running commands via fake CAPTCHA pages using a method called ClickFix
• Once infected, devices can have passwords, browser data, and crypto wallet info stolen
• Microsoft warns users to never paste commands from CAPTCHA pages, pop-ups, or emails

Microsoft Threat Intelligence has identified a cyberattack campaign that uses the BNB Smart Chain to store and deliver malicious code. Hackers compromise legitimate websites and inject JavaScript that connects to a smart contract on the blockchain.

Microsoft: Attackers Use BNB Smart Chain Contracts to Deliver Malware Instructions

Microsoft Threat Intelligence identified compromised websites using the EtherHiding technique to retrieve malicious instructions from a smart contract via a BNB Smart Chain RPC gateway. The… pic.twitter.com/IjUIjPmmsH

… Continue reading the full article at the original source below.