Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...
The update lets you contact VIPs with a tap and adds scam protection.