Highly Popular Websites Found to Be Infected With Malicious Code

guest · Oct 2, 2020

Four Highly Popular Websites Found to Be Infected With Malicious Code
Researchers discovered coin miners and card skimmers on very popular websites
October 2, 2020
https://www.technadu.com/four-highly-popular-websites-infected-malicious-code/214055/

The researchers at Unit 42 have decided to hunt for “widespread problems” online, trying to locate malicious code on websites that are ranked among the top 10,000 globally on Alexa.

Usually, hackers target less popular websites because they are not closely monitored or frequently maintained.
However, compromising a higher-popularity website means getting to steal more data and making a lot more money in the process, even if the infection doesn’t last for long.
Click to expand...

Libero.it – A very popular website in Italy [...] The team found malicious JavaScript coinminer hiding on the site’s code, using the visitors’ computational resources to make the crooks money.
Pojoksatu.id – A well-known news website in Indonesia. Had a nasty coinminer infection that mined Monero through a Coinhive script service.
Heureka.cz – A large e-commerce platform enjoying traffic from central and eastern European countries. A card skimmer was found on it, threatening to steal the card details of those who bought stuff on the platform.
Zoombangla.com – A Bangladeshi news website dealing with a coinminer infection.

The above examples concern websites ranked very high on Alexa, from 607 to 6579 (as of June 2020), so we’re talking about large volumes of traffic. Libero.it is actually the sixth most popular website in Italy right now, even above Wikipedia and Facebook.
Click to expand...

The problem with websites like these is that they are so reputable that most of their visitors blindly trust them. It is good to remember, though, that nobody is invincible and that malicious actors are not excluding these large platforms from their target lists.
Click to expand...

Palo Alto Networks - Unit42: Top Alexa Sites Infected With Malicious Coinminers and Web Skimmer

In the analysis that follows, we describe the malicious activity in more detail, covering malicious coinminers, which hijack CPU resources to mine cryptocurrency; malicious external links, which direct users to malicious sites; and a web skimmer attack, which is designed to steal payment card details from checkout forms.

Our research highlights that users need to exercise caution, even when visiting popular, apparently reputable websites.
[/quote9
Click to expand...

Log in or Sign up

Highly Popular Websites Found to Be Infected With Malicious Code

guest Guest

Log in or Sign up

Highly Popular Websites Found to Be Infected With Malicious Code

guest Guest

Useful Searches