> TritonInfoSec News
Home / Sep 06, 2026 / Story
0
#8 BleepingComputer general September 05, 2026 at 14:29 UTC

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

By Bill Toulas

AI Summary

A large-scale operation has compromised over 5,400 small-business websites to deliver ClickFix payloads, with the malicious code stored in smart contracts on the BNB Smart Chain (BSC) to evade takedowns. The use of blockchain for payload hosting represents a notable evasion technique that makes traditional URL-based blocking ineffective.

Read full article → https://www.bleepingcomputer.com/news/security/ove…

Relevance score: 78.0/100

# More from September 06

  1. 1
    Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores The Hacker News
  2. 2
    Google warns of new Chrome zero-day flaw exploited in attacks BleepingComputer
  3. 3
    Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials The Hacker News
  4. 4
    Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code The Hacker News
  5. 5
    Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities The Hacker News
  6. 6
    Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel The Hacker News
  7. 7
    39 New Methods That Compromise Passkey Authentication BleepingComputer
  8. 9
    Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites SecurityWeek
  9. 10
    US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure The Record