Digital advertising company Adform has confirmed a significant security incident involving the exploitation of its platform. Cybercriminals successfully compromised the firm's script infrastructure, allowing them to distribute malicious code across various websites that utilize Adform’s advertising services. This sophisticated supply-chain attack focused on intercepting and modifying cryptocurrency transactions initiated by unsuspecting site visitors.

According to BleepingComputer, the malicious script functions by monitoring the system clipboard of a user’s browser. When an individual attempts to copy a cryptocurrency wallet address to complete a transfer, the script automatically detects the action and silently swaps the legitimate destination address for one controlled by the attackers. Consequently, funds intended for genuine transactions are rerouted to digital wallets owned by the threat actors. Because the change happens instantly within the clipboard, many users may not notice the discrepancy before authorizing the payment.

Security experts emphasize that this type of attack highlights the inherent risks of third-party script integrations in modern web advertising. Adform has acknowledged the breach and initiated measures to mitigate the threat and secure its systems. Users interacting with sites that leverage external ad networks are advised to exercise extreme caution, verify all wallet addresses before confirming transactions, and monitor their digital assets for any signs of unauthorized diversion or suspicious activity while the investigation into the full extent of the compromise continues.