Bleeping Computer
8.0 — CRITICAL
Online ad firm Adform’s script compromised to steal cryptocurrency
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an attacker. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Adform's supply-chain attack compromised its script to steal cryptocurrency, replacing wallet addresses with attacker-controlled ones, potentially infecting downstream websites and end-user devices.
⚙️Technical Details
Affected Systems
trackpoint-async.jss2.adform.net
Attack Vectors
JavaScript tracking script served from s2.adform.net embedded in every website using the advertising platformmalicious Adform-hosted scripts communicating with an attacker-controlled server
💥Impact Assessment
Severity: high
Who Is at Risk
Individuals who visited websites that embedded the affected Adform technology on July 27, 2026
🛡️Recommended Actions
1Clear browser cookies to eliminate malicious code
2Monitor website traffic for suspicious activity
3Implement additional security measures to protect against supply-chain attacks
📦Affected Products
Adform's JavaScript tracking scriptWebsites using Adform's ad platform
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.