[adform]

August 1, 2026

• Adform's analytics script was compromised to hijack cryptocurrency transactions, affecting sites including Finland's national lottery Veikkaus. The injected code rewrites clipboard contents and already-filled browser form fields to swap BTC, ETH, and TRON wallet addresses; Kevin Beaumont notes affected clients were only notified after he went public (BleepingComputer, GossiTheDog). · Threat Activity

in When the Attacker Is a Model: AI Lands on Both Sides of the Fight

July 31, 2026

• Adform, the Danish ad-tech firm, was compromised in a supply-chain attack that served a crypto-wallet stealer and C2 beacon traffic through its advertising network; the payload also rewrites already-filled browser forms to swap wallet addresses (DoublePulsar). (discussion) · Threat Activity

in Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests