← Back to Feed

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

September 5, 2026 · BleepingComputer · Severity: MEDIUM

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC).

Key Takeaways

  • Over 5,400 compromised websites are serving ClickFix payloads stored in smart contracts on the BNB Smart Chain.
  • The decentralized storage technique makes it harder for security tools to detect and block the malicious payloads.
  • Users should exercise caution when encountering fake error pages and system alerts on websites.
☕ Buy a Coffee