Hacked government, college sites push malware via fake hacking tools

guest · Aug 11, 2020

Hacked government, college sites push malware via fake hacking tools
August 10, 2020
https://www.bleepingcomputer.com/ne...ge-sites-push-malware-via-fake-hacking-tools/

A large scale hacking campaign is targeting governments and university websites to host articles on hacking social network accounts that lead to malware and scams.

BleepingComputer first learned about this campaign after security intelligence firm Cyble shared a screenshot of the UNESCO.org site compromised to host an article on how to hack Instagram accounts.
Clicking on the embedded link brought you to a website that pretends to be an Instagram hacking tool that can hack into user's accounts.

Clicking the download link, though, redirects you to sites pushing malware, scams, and adware bundles.
Click to expand...

Part of a larger successful hacking campaign
After learning of this compromise, BleepingComputer investigated further and found many other colleges, government, and organization sites hacked to promote fake hacking tools for Netflix, WhatsApp, Facebook, Instagram, TikTok, and Snapchat.
From the samples observed by BleepingComputer, the threat actors exploit vulnerabilities in CMS platforms to insert their own hosted articles.

To make matters worse, the threat actors have successfully been able to perform blackhat SEO so that these 'hacking tools' are being promoted as the first search result in generic keyword searches in Google.
Click to expand...

This attack is similar to our report last month on how government sites were being abused to redirect users to adult sites.
At that time, we were concerned that attackers would abuse the low security of government and college websites to distribute malware. Unfortunately, that is exactly what is happening in this campaign.
Click to expand...

Log in or Sign up

Hacked government, college sites push malware via fake hacking tools

guest Guest

Log in or Sign up

Hacked government, college sites push malware via fake hacking tools

guest Guest

Useful Searches