September 6, 2026
- The EtherHiding campaign now spans more than 5,400 compromised websites. Injected scripts or spoofed packages contact BNB Smart Chain testnet contracts for takedown-resistant payload storage before displaying a ClickFix lure. Netskope also found a newer WebRTC-based variant. Netskope and BleepingComputer · Threat Activity