Supply Chain Attack Exploits Adform Script to Alter Crypto Wallet Addresses Across Multiple Websites

Hackers compromised Adform's JavaScript script to alter cryptocurrency wallet addresses on customer websites, exploiting a supply chain vulnerability. The malicious code, detected on July 27, 2026, replaced addresses in real-time and could have affected millions of users before removal.

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.

Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities.

Anyone who visited a site carrying the affected script on July 27 and copied a Bitcoin,

Read original article