“EtherHiding” — Hiding Web2 Malicious Code in Web3 Smart Contracts

A new malware campaign called “EtherHiding” has emerged, using BSC contracts to host parts of a malicious code chain. The campaign starts by hijacking WordPress sites and tricking users into downloading fake browser updates that are actually malware.