5,400+ hacked sites deliver ClickFix malware via blockchain-stored payloads

A large-scale operation has compromised over 5,400 small-business websites to serve ClickFix social-engineering payloads, with malicious content hosted on the BNB Smart Chain to evade detection. The use of blockchain for payload storage marks a notable evasion technique, though the full scope and attribution remain unclear. This highlights an emerging threat vector targeting SMEs and underscores the need for enhanced web security and blockchain monitoring.