Read

<div class="sg-post-des">
 Threat actors have worked out a way to hide malicious payloads in Binance smart contracts to lure victims into updating their browsers from fake prompts, according to cybersecurity researchers.
</div>
<div class="cointelegraph">
 Cybercriminals have discovered a new way to spread malware to unsuspecting users, this time, by manipulating BNB Smart Chain (BSC) smart contracts to hide malware and disseminate malicious code.
 A breakdown of the technique known as ‘EtherHiding’ — was shared by security researchers at Guardio Labs in an Oct. 15 report — explaining that the attack involves compromising WordPress websites by injecting code that retrieves partial payloads from the block<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> contracts.
 The attackers hide the payloads in Binance smart contracts, essentially serving as anonymous free hosting platforms for them.
 <blockquote class="twitter-tweet">
 Guardio Labs exposes "EtherHiding" - a new threat hiding in Binance's Smart Chain, a technique that evades detection, targeting compromised WordPress sites. Read about this game-changing method! @BNBCHAIN #BNBChain #CyberSecurity https://t.co/alNI5KqKUO— Guardio (@GuardioSecurity) October 15, 2023
 </blockquote>
 The hackers can update the code and change the attack methods at will. The most recent attacks have come in the form of fake browser updates — where victims are prompted to update their browsers using a fake landing page and link.
 The payload contains JavaScript that fetches additional code from the attacker’s domains. This eventually leads to full site defacement with fake browser update notices that distribute malware.
 This approach allows the threat actors to modify the attack <a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> by simply swapping out <a rel="noopener noreferrer nofollow" title="malicious" href="https://thebittimes.com/tag/malicious.html">malicious</a> code with each new block<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> transaction. This makes it challenging to mitigate, according to the head of Guardio Labs for cybersecurity, Nati Tal, and fellow security researcher Oleg Zaytsev.
 Once the infected smart contracts are deployed, they operate autonomously. All Binance can do is rely on its developer community to flag malicious code in contracts upon discovery.
 <figure><img src="https://cdn.thebittimes.com/images/2023/10/16/5793bf80dbb86f5f14f2353e68752255.webp">
 <figcaption style="text-align: center;">Contract address flagged for scam activity. Source: Guard.io
 </figcaption>
 </figure>
 Guardio stated that website owners using WordPress, which runs roughly 43% of all websites, need to be extra vigilant with their own security practices, before adding:
 <blockquote>
 “WordPress sites are so vulnerable and frequently compromised, as they serve as primary gateways for these threats to reach a vast pool of victims.”
 </blockquote>
 Related: Crypto investors under attack by new malware, reveals Cisco Talos
 The firm concluded that Web3 and block<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> bring new possibilities for <a rel="noopener noreferrer nofollow" title="malicious" href="https://thebittimes.com/tag/malicious.html">malicious</a> campaigns to operate unchecked. “Adaptive defenses are needed to counter these emerging threats,” it said.
 Magazine: Blockchain detectives — Mt. Gox collapse saw birth of Chainalysis
 <template data-name="subscription_form" data-type="crypto_biz"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/etherhiding-hackers-create-novel-way-to-hide-malicious-code-in-blockchains-tbt66457.html">https://thebittimes.com/etherhiding-hackers-create-novel-way-to-hide-malicious-code-in-blockchains-tbt66457.html</a>

EtherHiding: Hackers create novel way to hide malicious code in blockchains

TheBitTimes

Other articles published on Oct 16, 2023

Sber rejoins Russia’s digital ruble trials for 2024

U.S. government is now largest Bitcoin whale with $5b in BTC

Bitcoin Price Surges Above $28,300 as Spot Bitcoin ETF Gets Approved

What’s Happening in Ethereum, the King of Altcoins? Detailed Graph Analysis and Key Levels

Tournament Guide: Accumulated Score vs. High Score - Which Will You Choose?

Shiba Inu Price Prediction as SHIB Bounces 4% From Recent Bottom – Is The Sell-Off Over?

Join our free newsletter for daily crypto updates!