Researchers link Polyfill supply chain attack to huge network of copycat gambling sites