ClearFake Abuses BSC Testnet Contracts for Resilient C2 Operations

Gbhackers •Mayura Kathir • May 28, 2026

Threat actors behind the ClearFake campaign have adopted a novel and highly resilient command-and-control (C2) architecture by leveraging BNB Smart Chain (BSC) testnet smart contracts, creating an infrastructure that is effectively immune to traditional takedown efforts. Unlike conventional malware campaigns that depend on easily disruptable infrastructure such as hosting providers or registrars, this approach embeds […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClearFake Malware Campaign Exploits BSC Testnet for C2 Operations The ClearFake campaign has emerged as a significant cybersecurity threat by using BNB Smart Chain (BSC) testnet smart contracts to establish a resilient command-and-control (C2) infrastructure. This innovative approach allows attackers to operate without relying on traditional servers, making it difficult for security teams to dismantle their operations. The campaign is characterized by its ability to evade conventional takedown efforts, posing a challenge for cybersecurity professionals. The use of blockchain technology in this context represents a shift in tactics for malware campaigns, highlighting the evolving landscape of cyber threats. Organizations across various sectors may be affected due to the widespread nature of the BSC testnet. Current status indicates ongoing operations, with no immediate resolution in sight. 2 sources 68

Extracted Entities

ClearFake Abuses BSC Testnet Contracts for Resilient C2 Operations

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)