As cited
Copy frozen at (site build).
breaches incidents
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo discovered that attackers compromised a Cloudflare application programming interface (API) key to inject malicious ClickFix scripts into its websites and customer-embedded JavaScript files. The injected code was used to distribute malware to end users visiting affected sites.
Why it matters: Brevo customers and their users are at immediate risk of malware infection through this supply-chain compromise; verify your Brevo integrations and customer-facing JavaScript for unauthorized modifications.
- Source published
- First seen by Cybersecurity Tracker