BlockBeats said attackers copied a news page on its mobile website and inserted a script from a third-party domain, causing both the original flash and a malicious copy to appear in search results.
Publisher reports remediation
In an October 24 security notice, the publisher dated the incident to October 22 and said it had reproduced the problem, removed the malicious content and completed repairs.
BlockBeats also said it has never offered wallet sign-in or wallet-connection features. It warned that purported BlockBeats apps requesting either function are third-party fakes and said it would strengthen script review and monitoring of external resources loaded by its pages.
Source: BlockBeats, 2026-10-24 02:29:53 UTC.