Hackers exploited CoinMarketCap and Cointelegraph with malicious ads to steal crypto via fake wallet connect prompts.