Microsoft Says Hackers Are Hiding Malware Inside BNB Smart Chain Contracts

The technique

Microsoft's threat intelligence team spotted something pretty sneaky: hackers are using BNB Smart Chain smart contracts to hide and deliver malware instructions. The method is called EtherHiding, and it works by planting compromised code on websites that then reach out to a smart contract through a BNB Smart Chain RPC gateway to pull down the actual malicious payload.

Because the instructions sit on a blockchain instead of a normal server, it's harder for security tools to spot and take down, since you can't just shut down a smart contract the way you'd take down a shady website.

Why this matters

This is a good example of how attackers keep finding creative ways to abuse blockchain tech for stuff that has nothing to do with crypto trading. It's not really about BNB Smart Chain being unsafe to use, it's more that blockchains are public and permanent, which cuts both ways.

If you run a website, this is a nudge to double-check your site's security and keep software updated so it doesn't become the next entry point.