Detected #SmartApeSG infection chain Compromised site --> kblaa[.]com/gfont.ttf (injected) --> nebulaloom[.]top/oauth/reset-dom.js --> nebulaloom[.]top/oauth/auth-server --> nebulaloom[.]top/oauth/gateway-html.js (clickfix)