Injection into legitimate sites: Attackers compromise third-party websites to insert malicious JavaScript code that communicates with the blockchain. Resilience to takedowns: The malicious infrastructure uses smart contracts on BNB Smart Chain, making unilateral removal of content by third parties impossible.