Detected #KongTuke infection chain Compromised site --> griffihhs[.]click/q2hfsow4.js (ClickFucker) --> griffihhs[.]click/api/v1/session (token) --> griffihhs[.]click/api/v1/verify (gateway) --> griffihhs[.]click/api/v1/status (clipboard) --> tom-yy[.]top/f (powershell) 24d35d5da1d2f76292de0c6bc406fcc1108055eaaa0b54952cf8d9a49d0aea3e f