Microsoft Threat Intelligence has detected a batch of compromised websites using fake CAPTCHA to carry out ClickFix and TerminalFix attacks, leveraging EtherHiding technology to retrieve follow-up malicious instructions from BNB Smart Chain smart contracts. The attack pages trick users into opening Windows 'Run,' Terminal, or PowerShell, pasting clipboard content, and executing commands provided by the attackers, thereby spreading malware like Lumma Stealer, Xworm, AsyncRAT, and other remote control tools. Microsoft stated that such attacks target thousands of enterprise and personal devices globally every day. Users are advised not to execute any commands requested by CAPTCHA, browser error messages, ads, or unfamiliar support pages. https://(wublock123.com)/news/clearfake-bnb-chain-smart-contracts-distribute-malicious-instructions-66132