Brevo supply-chain attack injected ClickFix scripts on customer sites

Cybersecurity brief from BleepingComputer.

From the source

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. […]

Why it is on APerez.net

This belongs in the security stream because it can affect how systems are defended, operated, patched, monitored, or trusted. The source link below has the complete reporting and technical details.

This APerez.net Wire Brief is an automatically created digest from an RSS item. It does not republish the full source article.