Attackers are using BNB Chain smart contracts to deliver malicious commands, compromising thousands of devices with fake CAPTCHA prompts, Microsoft warns.