Stuffy Squirrel is a financially motivated threat actor active since at least 2020, controlling over 500 domains. It operates a traffic distribution system (TDS) that serves malicious JavaScript to site visitors, selling traffic to affiliate advertising networks for popunder ads and unwanted push notifications.