Sdk
- The AppsFlyer SDK Hijack: Registrar Attack, Crypto Stealer, and the SRI Gap
On March 9, 2026, attackers hijacked the AppsFlyer Web SDK via a domain registrar incident and served a professional-grade crypto-stealing payload to every site loading the SDK. The defence existed. Almost nobody had deployed it.