Detected #KongTuke infection chain Compromised site --> marshalh[.]icu/c9lg2uqb.js (ClickFucker) --> marshalh[.]icu/api/v1/session (token) --> marshalh[.]icu/api/v1/verify (gateway) --> marshalh[.]icu/api/v1/status (clipboard) --> hosthex9101[.]com/update/package (tar) 1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460 package