ClearFake: Blockchain-Powered Malware Lures Thousands with Fake Security Prompts

ClearFake, a malicious JavaScript framework, continues to evolve, using fake reCAPTCHA and Cloudflare Turnstile verifications to lure users into downloading malware. Initially tricking victims with fake browser updates in 2023, it later adopted the ClickFix tactic, displaying deceptive error messages to convince users to execute malicious PowerShell commands. The latest variant now integrates with the Binance Smart Chain, a blockchain network, leveraging smart contract Application Binary Interfaces (ABIs) to load JavaScript, fingerprint victims’ systems, and execute its payload.