EtherHiding: Binance’s Smart Chain Contracts Turned Evil
Main Points:
- Threat actors have been observed using Binance’s Smart Chain (BSC) contracts to serve malicious code, in an action termed as the “next level of bulletproof hosting.”
- Guardio Labs detected the activity two months ago and has since codenamed it EtherHiding.
- The said activity is a novel and worrying spin in an ongoing campaign that weaponizes compromised WordPress sites to target unsuspecting victims.
Binance’s Smart Chain (BSC) Contracts: The New Avenue for Cybercrime
Computer bad guys aren’t like the ones in the movies – they don’t always wear black hoodies in low lighting. Sometimes, they’re clever enough to operate in plain sight. Recently, threat actors have found an inventive way to serve malicious code – through Binance’s Smart Chain (BSC) contracts. This diabolical spin on how they operate has been ominously termed as the “next level of bulletproof hosting.” In layman’s terms? They’re hiding the bad stuff in hard-to-reach places. Talk about wicked smarts!
Paying Attention to Computer Baddies: Guardio Labs to the Rescue
Luckily for us, not all heroes wear capes. Instead, some wear lab coats while they fight off the bad guys in the virtual world. Guardio Labs spotted these breaches two months ago. They’ve been keeping a cyber eye on the situation, which they’ve codenamed “EtherHiding.” So, while the cyber villains are busy with their evildoing, our brave guardian scientists are busy too, playing a high-stakes game of interweb whack-a-mole.
Compromised WordPress Sites: A Landmine for Unsuspecting Victims
The attack methods even spill over to WordPress sites. A previous and ongoing campaign targets compromised WordPress sites to target the oblivious user. It perfectly coincides with the saying that even a broken clock is right twice a day. Sadly, in this instance, the “twice” is the hacker attacking innocent users. It seems like these fiendish activities are not as simple as ABC. It might even feel we are living in a BSC – Bizarre Smart Chain – world.
Summary
In summary, malicious hackers have found new ways to deploy their evil tricks using Binance’s Smart Chain contracts in a new threat-tracking process codenamed “EtherHiding” by Guardio Labs. An existing problem involving compromised WordPress sites has evolved into a more sophisticated threat. A bit like seeing your favorite superhero show take a dark turn – exciting for some, but nerve-wracking for the rest, especially those who happen to be on the receiving end of the cyberattacks.
Original Article: https://thehackernews.com/2023/10/binances-smart-chain-exploited-in-new.html
