Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Summary

A large-scale cybercriminal operation is using over 5,400 compromised websites to distribute ClickFix malware. The malware's payloads are being stored in smart contracts on the BNB Smart Chain, making them harder to detect and remove.

IFF Assessment

FOE

The article describes a large-scale cybercriminal operation using compromised websites and blockchain technology to distribute malware, which is detrimental to cybersecurity defenders.

Defender Context

This operation highlights the evolving tactics of cybercriminals who are now leveraging blockchain technology to store and distribute malware payloads. Defenders need to be aware of this trend and develop strategies to monitor and disrupt such operations, including focusing on detecting the initial compromise of websites and the smart contract interactions.

Read Full Story →