CYBERSECURITYTRACKER
TRACKING6,626 stories in this site build1,366 vulnerability news stories in this site build
Permanent story citation

Online ad firm Adform’s script compromised to steal cryptocurrency

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3659

As cited

Copy frozen at (site build).

breaches incidents

Online ad firm Adform’s script compromised to steal cryptocurrency

Adform, an online advertising firm, experienced a supply chain attack in which attackers compromised the company's ad scripts to inject cryptocurrency-stealing malware. The malicious code monitored users' clipboards and replaced wallet addresses with attacker-controlled addresses when users attempted to paste them.

Why it matters: Practitioners using Adform's ad platform and their website visitors face immediate risk of financial loss through clipboard replacement attacks; ad tech buyers should audit their supply chain integrations and implement controls to detect compromised scripts.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary