Detected #KongTuke infection chain Compromised site --> oosterhout[.]click/82234daz.js (ClickFucker) --> oosterhout[.]click/api/v1/session (token) --> oosterhout[.]click/api/v1/verify (gateway) --> oosterhout[.]click/api/v1/status (clipboard) --> tommy-aa[.]lol/f (powershell) 64242dabcf2551d3aeab1ce9e22ae2e8508726d20ec3b347f783e5fa7216423c f