Microsoft uncovered a new malware campaign exploiting BNB Smart Chain to make its infrastructure harder to take down. Attackers compromised legitimate websites by injecting malicious JavaScript that communicates with a smart contract deployed on this blockchain. The campaign uses the EtherHiding technique, linked to the ClearFake malware operation, and retrieves its payloads via a BNB Smart Chain RPC gateway. Victims are then prompted to execute malicious commands through fake CAPTCHA pages on Windows. Successful infections can expose credentials and pave the way for ransomware attacks, delivering payloads such as Lumma Stealer, XWorm, AsyncRAT, MintsLoader, and remote management tools.
Source: Read the original article
