Hackers Use BNB Chain to Spread Malware via Fake CAPTCHAs

Microsoft security researchers have uncovered a new attack campaign where hackers use the BNB Chain to distribute malware. Compromised websites are programmed to pull malicious instructions straight from the blockchain before tricking unsuspecting visitors into running harmful files on their Windows devices.

The attack typically starts when a user visits an infected site and encounters a fake CAPTCHA verification prompt. Once the visitor follows the fraudulent instructions, the hidden script executes dangerous payloads on their computer. By storing operational data on chain, the attackers make their infrastructure harder for traditional security tools to shut down.

This incident highlights how malicious actors continue to find creative ways to abuse public ledgers for cybercrime. Traders and crypto users should remain vigilant when browsing unfamiliar websites, especially when asked to complete unusual verification steps or run system commands.

Security teams will likely monitor blockchain transaction patterns closely to track and block these decentralized command channels. Users must ensure their antivirus software is up to date and avoid executing unknown scripts on their machines.