Supply Chain Attack Exploits Adform Script to Manipulate Cryptocurrency Wallet Addresses

Hackers compromised Adform's JavaScript script to alter cryptocurrency wallet addresses on affected websites, enabling unauthorized fund redirection. The supply-chain attack exploited a shared resource, affecting multiple downstream sites without direct breaches.

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.

Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities.

Anyone who visited a site carrying the affected script on July 27 and copied a Bitcoin,

Read original article