[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f27AlWSqdnjlmNoQAGmWA4XUu-KVs7m8BfZK4fFdiuEk":3},{"article":4,"iocs":40},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":27},"59228901-ab84-465b-a341-fc346e4d7ec6","ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain","clickfix-campaign-compromises-31-orgs-abuses-polygon-blockchain-c4b7fe","The campaign uses EtherHiding to dynamically update its command-and-control server, abusing the blockchain as an attacker-controlled address book.","A new malware campaign dubbed ClickFix has successfully compromised 31 organizations by leveraging a technique called EtherHiding. This method allows the malware to dynamically update its command-and-control (C2) server addresses, which are stored and managed on the Polygon blockchain. This abuse of blockchain technology effectively turns it into an attacker-controlled address book, making it harder to track and disrupt the campaign.","ClickFix campaign targets 31 organizations using EtherHiding and abusing the Polygon blockchain.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fendpoint-security\u002Fclickfix-campaign-comprises-31-orgs-abuses-polygon-blockchain","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt6a0f2dc67da094b0\u002F6a96c86cc735cc0c3671a7e3\u002Fblockchain_incamerastock_alamy.png?width=720&quality=80&disable=upscale","2026-09-01T13:56:42+00:00","2026-09-01T16:00:09.366551+00:00",7,[18,21],{"name":19,"type":20},"EtherHiding","technology",{"name":22,"type":20},"Polygon blockchain","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":11,"name":25,"slug":26},"Malware","malware",[28,33,35],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":23,"icon":11,"name":25,"slug":26},{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[41],{"type":26,"value":42,"context":43},"ClickFix","Name of the malware campaign"]