logo

ClearFake Uses BSC Testnet Smart Contracts for Resilient C2 Operations

ID: 7245f41d-3705-551a-8b95-42d8fad29066

STIX ID: report--7245f41d-3705-551a-8b95-42d8fad29066

Feed Name: Cyber Press

Threat Score
75/100

Date Published: 2026-05-28

Date Updated: 2026-05-28

Author: Varshini

...
...

The ClearFake campaign leverages EtherHiding to store malicious payloads in BNB Smart Chain testnet contracts, enabling attackers to inject obfuscated inline JavaScript into compromised websites that fetch and execute on-chain payloads; a dedicated tracking contract logs infected IPs to suppress repeat displays of fake reCAPTCHAs, making the campaign highly resilient to takedown and evasive of traditional network indicators.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.