Microsoft flags ClickFix malware using BNB Chain to fetch attack instructions

Microsoft has warned of ClickFix attacks using BNB Chain smart contracts to infect thousands of devices every day. Summary Microsoft said ClickFix attacks are using BNB Chain smart contracts to deliver malware instructions. Fake CAPTCHA pages trick users into running attacker supplied commands on Windows devices. The campaign targets thousands of enterprise and consumer devices worldwide every day. Microsoft warned successful attacks can expose credentials and lead to ransomware deployment. According to Microsoft Threat Intelligence, a cluster of compromised websites has been using ClickFix lures together with the EtherHiding technique to deliver malware, with campaigns targeting thousands of enterprise and consumer devices worldwide each day. Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart… pic.twitter.com/FOivGuUxVV— Microsoft Threat Intelligence (@MsftSecIntel) August 6, 2026 The security team said attackers inject Base64-encoded JavaScript into compromised...