Cybercriminals have developed a new method of spreading malware by manipulating Binance Smart Chain (BSC) smart contracts to hide and distribute malicious code. The technique, known as 'EtherHiding', involves injecting code into compromised WordPress websites that retrieves partial payloads from blockchain contracts. The attackers hide the payloads in Binance smart contracts, which act as anonymous free hosting platforms for them.

The hackers can update the code and change attack methods at will, making it difficult to mitigate. Website owners using WordPress need to be extra vigilant with their security practices, as WordPress sites are frequently compromised and serve as primary gateways for these threats to reach a large number of victims.