Detected #KongTuke infection chain Compromised site --> chaphan[.]click/jkg4oml2.js (ClickFucker) --> chaphan[.]click/api/v1/session (token) --> chaphan[.]click/api/v1/verify (gateway) --> chaphan[.]click/api/v1/status (clipboard) --> tommy-er[.]top/f (powershell) 61351d869940b9875400bf4ebd1bdc29f972813473a823acc85db242487212bc f