Hundreds of U.S. Newpaper Sites Push Malware in Supply Chain Attack by TA569 Group

The threat actor behind this supply-chain attack (tracked by Proofpoint as TA569) has injected malicious code into a benign JavaScript file that gets loaded by the news outlets' websites.