Hackers Use Blockchain to Deliver ClickFix Payloads via Thousands of Compromised Sites

Cybersecurity researchers have uncovered a massive cybercriminal campaign that leverages thousands of compromised small-business websites to distribute ClickFix payloads.

What makes this operation particularly notable is the use of decentralized infrastructure. Instead of relying on traditional web servers, the threat actors store the malicious payloads inside smart contracts on the BNB Smart Chain (BSC), making it much harder to take down.

ClickFix attacks typically rely on social engineering, tricking users with fake browser errors or update prompts into manually executing malicious scripts. Integrating blockchain technology adds a layer of resilience that bypasses standard takedown procedures.

This campaign highlights how cybercriminals continue to adopt innovative techniques to maintain persistence and evade detection by security researchers and law enforcement.

For IT professionals and business owners globally, this emphasizes the critical need for robust website security, regular vulnerability patching, and heightened awareness regarding modern social engineering tactics.