Threat actors are distributing a previously undocumented remote access trojan called ChainScript through fraudulent ClickFix lures disguised as legitimate applications like Zoom and Spotify. The malware utilizes Polygon smart contracts to dynamically rotate its command-and-control infrastructure, complicating detection and analysis efforts for security defenders.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →