The source describes a specific July 2026 incident where attackers compromised Adform's ad-serving infrastructure and injected malicious code that ran in users' browsers. The attack works by continuously replacing cryptocurrency wallet addresses in the clipboard every three seconds, causing victims to paste attacker-controlled addresses instead of intended recipients when sending crypto. Adform serves 1.5 billion ads daily. The source cites security researcher Kevin Beaumont as the initial discoverer. Importantly, Adform has not disclosed how it was initially breached or provided victim counts. The article uses this incident to argue for ad-blocker adoption as a security defense, and notes the author's own ad blocker successfully prevented the malicious domain from loading. One sharp question: the source doesn't specify whether Adform's customers (websites using their ads) were notified before or after discovery, or what timeline existed between compromise and remediation.