According to CoinMeta, Microsoft Threat Intelligence has identified malicious websites that utilize a BNB chain and a RPC gateway to obtain real-time malicious instructions from smart contracts on the blockchain. These attacks, known as Clickfix / Terminalfix, affect thousands of corporate and consumer devices every day. The attack process is as follows: 1. Attackers infiltrate legitimate websites and inject JavaScript to display fake verification codes or "repair browser" pages; 2. The pages dynamically extract commands for the next phase; 3. Users are prompted to open Win +R /terminal/ PowerShell and paste "verify" or "repair" commands to execute the malicious payload on the blockchain; 4. Successful execution can lead to information theft or the installation of malware. Recommendations: 1️⃣ Any page that prompts you to press Win +R and paste content is malicious; please close it immediately. 2️⃣ Do not believe prompts such as "Verification code failed—run this command to repair." 3️⃣ If you have already executed the command, please disconnect from the internet immediately and change your passwords.