Microsoft warns of ClickFix attacks via BNB Smart Chain
Microsoft has alerted users to a new wave of ClickFix attacks that exploit the BNB Smart Chain to hide malicious instructions. These attacks target thousands of devices daily through fake CAPTCHA prompts. The Microsoft Threat Intelligence team revealed that compromised websites display fake CAPTCHAs, which lead users to execute harmful commands. The attack utilizes techniques like ClickFix and TerminalFix, potentially affecting numerous corporate and home devices worldwide. Researchers link this activity to EtherHiding, previously used by the ClearFake campaign, allowing malicious instructions to be stored in smart contracts, complicating traditional removal methods. The attack involves injecting Base64 JavaScript into compromised sites, which queries the BNB Smart Chain RPC gateway for instructions from a smart contract associated with ClearFake. Once on the compromised page, users encounter a fake CAPTCHA that prompts them to execute commands in Windows Run. Microsoft advises against entering commands from CAPTCHAs or unsolicited messages into any command interfaces. The ClickFix and TerminalFix techniques are noted for their effectiveness in gaining initial access, targeting thousands of devices daily. Once access is obtained, attackers can deploy various malware types, including data stealers and remote access trojans. Successful execution of a single command can lead to credential theft and further network compromise, potentially resulting in ransomware attacks. Microsoft recommends organizations activate Microsoft Defender's network, web, and cloud protection, restrict access to command interfaces, enable PowerShell script logging, and implement application control.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Fomo Enters Top Five Financial Apps in the U.S., Surpassing Cash App and Kalshi

Venus Protocol Launches Liquidity Hub for Unified Liquidity Access

Cosmos Labs Acknowledges Error, Attacks Affected Six Blockchains

LemLoans Considers Up to $2 Billion Liquidity Support and Announces $25 Million Initial Commitment

Zhao Acknowledges Underestimating Stablecoin Growth of $320 Billion

RWA: CZ Wants States to Tokenize Everything to Attract Foreign Capital

NFT sales fall 44.7% to $63.3M as Ethereum leads

Lazarus Group Transfers 244 BTC, Analysts Issue Warning

The Sandbox to Repay 1:1 SAND After Exploit

De¹ Financial World Model Secures Investment from YZi Labs to Build On-Chain Finance on BNB Chain

CCC exploit drains $117K after attacker targets BSC liquidity pool

The Sandbox Launches Compensation Plan for Vulnerability Incident, 1:1 Compensation in SAND Tokens

CZ: AI and Crypto Integration Will Start with Stablecoins, AI Trading Takes Priority Over AI Payments

Engrave Releases Zero Firmware 1.8 QR Specification

BNB Chain x402 Payments Exceed 1.4 Million Transactions

Binance founders used ‘The Simpsons’ codenames, former employees share

Primus Pushes Confidential Finance Product on BNB Smart Chain

TON Legacy Bridge to End on September 1, 2026

BNB Chain Activates Pasteur Hard Fork to Enhance BSC Cross-Chain Bridge Security and Block Capacity

Chain shutdown strips BounceBit token utility after authorization flaw exposes 286M tokens

HertzFlow Mainnet Trading Launched with 390,000 WLFI Liquidity Rewards

HertzFlow Reveals List of Individual Investors Including Raydium

BRTFit Prepares for Southeast Asia Expansion, Releases 1 Million BRT Airdrop Rules

Solana Tokenized Stock Deposits Reach $75.4 Million, Ranking First

Zhao Changpeng Confirms CZ Public as Second Largest Anonymous Donor to Giggle

Robinhood Crypto and Regulation in Russia: Key Events in the Crypto Market

Bonk Guy: Major Public Chains Compete for Retail Investors and Liquidity

BounceBit Chain Permanently Shuts Down and Migrates to BNB Chain

Ethereum EIP-7702 Involves Security Risks in 63% of Authorized Transactions









