ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

thehackernews.com Sep 21, 2026

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Curated by Shubham · TechCapsules · Sep 21, 2026

AI-summarised brief · reviewed before publication

Threat actors are using ClickFix‑style lures to deliver a new remote‑access trojan dubbed ChainScript. The malware, also seen under names such as ComponentTask33 and OrchidViolet66, masquerades as legitimate software like Spotify, Zoom Workplace and Microsoft Teams. After a malicious MSI installer runs via msiexec.exe, it drops a Node.js runtime and launches a JavaScript agent through hidden PowerShell and VBScript stages, installing components in “%LOCALAPPDATA%” and persisting via a scheduled task with a Registry Run key fallback. ChainScript employs an EtherHiding‑style C2 discovery method that queries a Polygon smart contract to locate its WebSocket server, allowing the backend to rotate without changing the implant. The RAT offers full remote control, including CMD/PowerShell shells, file manipulation, screenshot capture, cryptocurrency wallet enumeration and remote JavaScript execution. The campaign, linked to the compromised HBO Max Reddit account, also distributes macOS stealers and crypto clippers, with 108 malicious ads posted over 48 hours in mid‑September 2026.

💡 Why It Matters

· By offloading C2 resolution to a blockchain contract, attackers can instantly shift infrastructure, rendering traditional takedown and signature‑based defenses ineffective.
· This technique signals a new frontier where decentralized platforms become core components of malware command structures.

Read full article on thehackernews.com

SEC’s New AMM Rules Reshape the Tokenized Stock Market

The SEC has introduced a five‑year exemption for tokenized‑stock trading on public blockchains, but only for US‑operated, permissioned venues that use automated market maker (AMM) pools. The rule grants temporary relief from national exchange registration and dealer registration for venues that screen participants and control pool access. Eligible tokens must confer full shareholder rights—dividends, voting, and ownership—excluding synthetic exposure products. Existing decentralized exchanges like Uniswap and Raydium cannot qualify without creating permissioned pools. Firms such as Securitize, Ethereum, Coinbase, and Robinhood face new compliance hurdles to list compliant tokens.

💡 By tightening tokenized‑stock eligibility, the SEC forces the industry toward regulated, identity‑verified markets, reshaping how digital securities are offered and traded in the U.S.

cyberint.com · Sep 20

MovieReaper Malware: From Movie Download to Malware Infection

MovieReaper, first seen in September 2026, is a modular malware that blends a remote‑access trojan with a loader, targeting x86‑64 Windows systems. It spreads via compromised torrent‑file infrastructure, delivering a disguised loader that passes anti‑sandbox checks, downloads shellcode, and retrieves command‑and‑control endpoints from a Solana blockchain. Subsequent stages establish HTTPS communication with certificate pinning, load additional COFF modules, perform UAC bypass, and persist by masquerading as C:\ProgramData\Microsoft\Windows\Telemetry\msedge.exe. The final implant offers full file‑management, exfiltration, and remote control, enabling durable, stealthy post‑compromise activity across individuals and organizations worldwide.

💡 The use of blockchain‑based C2 and torrent‑file delivery expands the attack surface beyond traditional phishing, enabling attackers to reach a global user base with minimal effort. This strategy demonstrates how malware can exploit legitimate infrastructure to evade detection and maintain persistent, high‑impact access.

emirates247.com · Sep 20

Abu Dhabi Digital Skills Card: What it is, who can get it…

Abu Dhabi’s Quality and Conformity Council (QCC), in partnership with Union Assessment and Quality Accreditation (UAC), launched the Gulf region’s first blockchain‑verified Digital Skills Card. The card records an individual’s professional qualifications in a secure, digitally verifiable format. Certified professionals across various sectors can obtain the card, which links to QCC‑accredited certifications issued by UAC. Employers and regulators can scan the QR code to instantly confirm authenticity. The initiative aims to streamline credential verification, enhance transparency, eliminate paper certificates, and support workforce mobility throughout the GCC. The program plans to expand its certification portfolio in the near future.

💡 By embedding credentials in blockchain, the card eliminates fraud risks and speeds hiring decisions, directly addressing talent shortages in high‑growth tech and skilled trades sectors.

analyticsinsight.net · Sep 20

How Blockchain Solves Real-World Problems Across Industries: Use Cases, Benefits

Blockchain is expanding beyond cryptocurrency into shared infrastructure for payments, asset tokenization, and supply‑chain tracking. By providing a synchronized, tamper‑evident ledger, it lets multiple firms coordinate without a single controlling database. In cross‑border payments, stablecoins can settle transactions in seconds, and Visa reported a stablecoin settlement volume exceeding a $20 billion annualized run rate in September 2026, more than 15 times its year‑on‑year level, alongside over 160 stablecoin‑linked card programs worldwide. Tokenization on Ethereum now backs roughly $16.6 billion in real‑world assets and $159.9 billion in stablecoins, enabling fractional ownership and programmable settlement. Permissioned blockchains such as IBM Food Trust allow food‑supply participants to share traceability data, improving origin verification and contamination response. Smart contracts automate payments, collateral, and insurance, while zero‑knowledge proofs can confirm credentials without exposing underlying data, reinforcing blockchain’s role wherever multiple parties need coordinated, verifiable records without a single data custodian.

💡 The surge in stablecoin settlements and real‑world asset tokenization shows blockchain moving from niche experiments to core financial infrastructure, reshaping how global payments and ownership are recorded and transferred.

latestly.com · Sep 19

TRAI Mandates Caller-ID Apps to Share User Spam Reports With Telecom Operators…

The Telecom Regulatory Authority of India (TRAI) has expanded its anti‑spam rules, mandating caller‑ID and call‑management apps to forward user‑generated spam reports to telecom operators via a blockchain platform. The directive also targets AI‑driven and robocalls, requiring businesses to pre‑register automated calling numbers. Non‑compliant traffic is deemed spam and may incur termination charges. The move aims to tighten nationwide control over fraudulent communications but has sparked industry friction, with apps like Truecaller citing anti‑competitive concerns and data‑privacy ambiguities.

💡 By forcing third‑party apps to feed real‑time spam data into operators’ networks, the rule could dramatically improve spam detection speed and accuracy, reshaping how telecoms and app developers collaborate on consumer protection.

memeburn.com · Sep 16

Solana’s Tokenized Stock Volume Beat Nasdaq and NYSE Combined

Tokenized equity supply on Solana surged to a record $684 million, a 47 % increase over three weeks, according to a Solana Foundation report dated 13 September 2026. On 12 September, the network processed more tokenized‑equity volume than the combined New York Stock Exchange and Nasdaq, with Raydium routing roughly 70 % of that flow. Over 95 % of cross‑chain tokenized equity volume now resides on Solana. Notable ticker‑level performance includes Grindr (GRND), which traded about $31 million on‑chain in its first 24 hours, nearly double the $16.6 million NYSE volume for the same period. The surge is driven largely by StonkFun’s meme‑trade model, which channels about 60 % of fees into buying and burning its STONK token, and reflects Solana’s rapid adaptation after Robinhood Chain’s July launch.

💡 The data shows blockchain platforms can outpace traditional exchanges in raw trading volume, proving that tokenized securities are gaining real‑world traction beyond niche speculation.