Brevo supply-chain attack injected ClickFix scripts on customer sites

Hack at Marketing Vendor Exploited To Widely Spread ClickFix Malware Attack

A hack at Brevo, an online marketing vendor, created a pathway to place a ClickFix-style attack across numerous websites on Monday to try and trick users into installing malware.

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. [...]

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

Brevo Supply Chain Attack Pushes WordPress Backdoors and ClickFix Malware to 100,000+ Sites

A supply-chain compromise involving Brevo briefly turned widely used website tools into a delivery channel for malware. Attackers inserted hostile JavaScript into services that customer websites load, exposing both visitors and WordPress administrators. The activity reached more than 100,000 customer sites on September 14, according to the investigation. People who opened affected sites, chat features, sign-up forms, or email-linked unsubscribe …