Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
SocksEscort sold proxy services on the open web, but was actually routing traffic through compromised routers and internet-connected devices.