Software supply chain attacks stories

ClickFix Malware Campaigns Evolve with Blockchain Infrastructure and Browser Fingerprinting to Evade Detection

Cybersecurity researchers have identified sophisticated evolution in ClickFix malware operations, including attackers using BNB Chain smart contracts to deliver attack instructions, browser fingerprinting to hide macOS malware lures, and a self-propagating npm worm called ChainDrop that infected over 400 packages downloaded hundreds of millions of times weekly.