Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet

Reported 26 May 2026 by otx · Severity: medium

Threat actors exploited the EtherHiding technique to store ClearFake payload routing instructions within smart contracts on the BNB Smart Chain testnet, creating an immutable command-and-control infrastructure that cannot be taken down. The attack began with injected JavaScript o