Brevo supply-chain attack injected ClickFix scripts on customer sites
Thu Sep 17 2026
Breach
Cloud
Malware
Supply Chain
www.bleepingcomputer.com
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. [...]