Coverage 1 publisher
Articles stay on their publishers’ sites; each link opens the original.
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Cisco Talos tracks a cryptocurrency-stealing campaign that uses the Google Visualization API for command and control. It retrieves obfuscated JavaScript from a publicly published Google Sheets document and injects the code into a victim’s browser session.