javascript
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Advertising technology firm Adform has identified a supply chain attack where hackers compromised a JavaScript file to alter cryptocurrency wallet addresses displayed on client websites. The malicious code, active around July 27, 2026, could replace legitimate wallet addresses with attacker-controlled ones when users copied them or interacted with forms. Adform has since removed the malicious code and notified affected customers, advising them to clear browser caches and verify all wallet addresses before sending funds.
Phishing Campaign Deploys JavaScript-Driven PureLogs Variant to Steal Sensitive Data
A recent phishing campaign has been identified that utilizes sophisticated techniques including obfuscated JavaScript and PowerShell. The attackers employ process hollowing and a variant of the PureLogs malware to exfiltrate sensitive user data.