confirmedhighSupply chainFirst reported Sep 17, 2026

Brevo: supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites. The injected scripts were used to distribute malware.

In the News

Coverage the BreachFeed team linked to this incident, newest first.

Bleeping Computer·1d agoConfirmed Breach

Email
Text message
Post on X
Share on LinkedIn

Link — click to select, then copy:

https://breachfeed.com/article/cmu5sektp017bhmu2l3i39vh6

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. [...]