ClearFake's EtherHiding chain uses BNB Smart Chain as a C2 dead-drop - malware delivered via WebDAV ClickFix. https://intel.threadlinqs.com/threat/TL-2026-2387 #ThreatIntel #Amatera #ZigCryptoStealer #Netsupport