Ethereum

<div class="sg-post-des">
 According to cybersecurity analysts at 0xScope and CertiK, threat actors may prefer using BNB Smart Chain contracts because it’s cheaper and seen as having lower security than Ethereum.
</div>
<div class="cointelegraph">
 Despite the name “EtherHiding,” the new attack vector that hides malicious code in blockchain smart contracts doesn’t have much to do with Ethereum at all, cybersecurity analysts have revealed.
 As reported by Cointelegraph on Oct. 16, EtherHiding has been discovered as&nbsp;a new way for bad actors to hide malicious payloads inside smart contracts — with the ultimate goal of distributing malware to unsuspecting victims.
 These cybercriminals tend to <a rel="noopener noreferrer nofollow" title="prefer" href="https://thebittimes.com/tag/prefer.html">prefer</a> using Binance’s BNB Smart Chain, it is understood.
 Speaking to Cointelegraph, a security researcher from blockchain security firm CertiK, Joe Green, said most of this is due to BNB Smart Chain’s lower costs.
 <blockquote>
 “The handling fee of BSC is much cheaper than that of ETH, but the network stability and speed are the same because each update of JavaScript Payload is very cheap meaning there’s no financial pressure.”
 </blockquote>
 EtherHiding attacks are initiated by <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a>s compromising WordPress websites and injecting code that pulls partial payloads buried in Binance smart contracts. The website’s front end is replaced by a fake update browser prompt which when clicked pulls the JavaScript payload from the Binance blockchain.
 The actors frequently change the malware payloads and update website domains to evade detection. This allows them to continuously serve users fresh malware downloads disguised as browser updates, Green explained.
 <figure><img src="https://cdn.thebittimes.com/images/2023/10/20/e973222a609310648fa90c986d167e85.webp">
 <figcaption style="text-align: center;">
 Screenshot of malware updates being deployed in BSC smart contract. Source: Certik&nbsp;
 </figcaption>
 </figure>
 Another reason, according to security researchers at Web3 analytics firm 0xScope, could be because of increased security-related scrutiny on Ethereum.
 <blockquote>
 "While we are unlikely to know the EtherHiding hacker's true motives for using BNB Smart Chain over other blockchains for their scheme, one possible factor is the increased security-related scrutiny on Ethereum.”
 </blockquote>
 Hackers may face higher risks of discovery by injecting their malicious code using Ethereum due to systems such as Infura’s IP address tracking for MetaMask transactions, they said.
 Related: Crypto investors under attack by new malware, reveals Cisco Talos
 The 0xScope team told Cointelegraph they recently tracked the money flow between <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> addresses on BNB Smart Chain and Ethereum.
 Key addresses were linked to NFT marketplace OpenSea users and Copper custody services, it reported.
 Payloads were updated daily across 18 identified <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> domains. This sophistication makes EtherHiding hard to detect and stop, the firm concluded.
 Magazine: Should crypto projects ever negotiate with <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a>s? Probably
 <template data-name="subscription_form" data-type="markets_outlook"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/etherhiding-why-hackers-may-prefer-binance-s-bnb-smart-chain-tbt67072.html">https://thebittimes.com/etherhiding-why-hackers-may-prefer-binance-s-bnb-smart-chain-tbt67072.html</a>

EtherHiding: Why hackers may prefer Binance’s BNB Smart Chain

TheBitTimes

Other articles published on Oct 20, 2023

The Future of Cryptocurrencies: Expert Opinions and Promising Altcoins

Reddit mods dumped tokens hours before blockchain program termination

Internet Computer Price Prediction: ICP at Crucial Make-or-Break

Gemini, Genesis, and DCG to Face $1B Lawsuit from NY Attorney

Circle to launch new smart contract platform

ConsenSys Ex-Employees Sues Company CEO Over Equity Shares Issue

Join our free newsletter for daily crypto updates!