Attackers compromised a Brevo Cloudflare API key to inject malicious ClickFix scripts into their websites and embedded JavaScript files. This supply-chain incident targeted customer sites to distribute malware via browser update lures.

supply-chainclickfixmalwareapi-security
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →