Hundreds of U.S. news sites hit in SocGholish supply-chain attack
The compromised infrastructure of an undisclosed media company is being used by threat actors to deploy the SocGholish JavaScript malware framework (also known as FakeUpdates) on the websites of hundreds of newspapers across the U.S.
Source: bleepingcomputer.com