ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

A sophisticated cryptocurrency theft campaign is leveraging Google Sheets and the Google Visualization API for stealthy browser-based command and control, tricking users into injecting malicious JavaScript that skims web sessions and swaps crypto addresses, all under the guise of a fake exploit targeting would-be cybercriminals.