DebugBear

Reported Context (5)

Website performance monitoring firm DebugBear, meanwhile, has disclosed that its DNS records were compromised. Polymarket Says It Will Pay $3.9 Million After Malicious Script Attack
The replaced script came from DebugBear, whose real user monitoring (RUM) tool measures how fast web pages load for real visitors. Hijacked DebugBear Script Steals About $2.7 Million From Polymarket Traders
Researchers have linked the theft to malicious code served from DebugBear, a UK-based website performance monitoring firm. Researchers Link Polymarket Withdrawals to DebugBear Supply-Chain Attack
The corroborationRemoval recorded in a live buildA production asset explicitly names removal of the DebugBear RUM script. Researchers Find Wallet-Draining Code in Polymarket-Associated Third-Party Script
Security researchers at Hudson Rock identified malicious JavaScript distributed through cdn.debugbear[.]com/C7xcKKrjUnXK.js that was designed to steal cryptocurrency and prediction-market holdings from Polymarket users. Polymarket Resumes Trading After Malicious Script Targets User Assets

MITRE ATT&CK (3)

Products (3)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.