Online ad firm Adform’s script compromised to steal cryptocurrency

Adform's tracking script (trackpoint-async.js) was compromised for ~7 days and injected with malware that hijacks cryptocurrency wallet addresses from user clipboards and exfiltrates data to attacker infrastructure. All websites using Adform's ad platform were affected. Users visiting these sites risked losing cryptocurrency funds through clipboard replacement attacks.