Cybersecurity Experts Warn of Malware Utilizing Blockchain for Evasion and Persistence
Cybersecurity experts are observing a growing trend where threat actors are leveraging public blockchains to host malware infrastructure, including payloads, command-and-control (C2) mechanisms, and victim data. This technique, known as EtherHiding, allows attackers to create takedown-resistant systems by storing malicious components in smart contracts on distributed ledgers. The report highlights the 'ClickFix' campaign, which compromises legitimate WordPress sites and ultimately delivers the Vidar infostealer. Attackers are using both Polygon and Base mainnets, with the former acting as a resolver for pointers to off-chain traffic distribution systems, and the latter directly hosting the malicious payload. This method exploits the immutable and decentralized nature of blockchains, making it difficult for traditional security measures to disrupt the malware's operations. The scale of this issue is significant, with close to 10,000 compromised sites worldwide identified, and one victim-tracking contract lo... 
