Executive Summary

A cybercriminal network compromised more than 5,400 small‑business websites to host and deliver ClickFix malware. The payloads are stored in smart contracts on the BNB Smart Chain, allowing attackers to serve malicious code via compromised sites. The operation demonstrates a novel use of blockchain for malware distribution and highlights the scale of web‑site hijacking.

---

Intelligence Metadata - Source Publisher: Bleeping Computer - Published Date: 2026-09-05T14:29:13+00:00 - Category: threat-intel

Original Description: A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). [...]

"Happiness does not come from having much, but from being attached to little."

— Cheng Yen