Fake Cloudflare Check Hides Its C2 List on the Polygon Blockchain
Stormshield says hacked WordPress sites read C2 addresses from a Polygon smart contract, then show Windows visitors a fake Cloudflare check that leads to a stealer loaded through the Deno runtime.