Researchers link Polyfill supply chain attack to huge network of copycat gambling sites

Security researchers report that FUNNULL gained control of the popular Polyfill.io domain and used it as a vector for a large-scale supply-chain attack, injecting malware and redirecting visitors to a network of roughly 40,000 spammy Chinese-language gambling sites; the activity appears monetization-focused but demonstrates capacity for far more damaging attacks and includes links to money-moving/laundering infrastructure.