Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.
First seen on hackread.com
Jump to article: hackread.com/clickfix-chainscript-rat-fake-spotify-teams-installers/
![]()

