@GossiTheDog@cyberplace.social
Post #4243345
2026-07-30 13:57 UTC
If you like malware reverse engineering, this was being served by Adform a few days ago: https://pastebin.com/mc7psaNF
Replies (2)
-
@GossiTheDog@cyberplace.social 2026-07-30 14:01
I didn't cover it in the blog but it does an amusing thing where aside from hijacking the clipboard, it also rewrites browser forms already filled in to change wallet addreses, lol. So if you browse an autofill form it replaces that too. One of the big crypto firm execs sits on Adform's executive, I think they may have been hit in the incident by this.
-
@ninkosan@mas.to 2026-07-30 14:00
@GossiTheDog@cyberplace.social “ad blocking is a security control” strikes again