Researchers have identified 15,579 websites currently infected with malicious JavaScript, receiving over 135 million monthly visits. The discovery rate far exceeds the ability to notify affected organizations. The team at Report URI has grown its Threat Intelligence capabilities, allowing them to find infections faster than they can contact victims.
These infections range from credit card skimmers and click fraud to device exploitation and redirects to phishing pages. Attackers gain access through direct compromise, supply chain attacks, XSS vulnerabilities, and dead domain revivals. While none of the sites are global leaders, there is a high presence of regional leaders in countries like France, Spain, and Germany.
Despite the scale, direct outreach to high-impact sites remains small due to resource constraints and low security.txt adoption. The process of responsible disclosure is consuming more resources than available, leaving many infections unaddressed. The researchers are asking for help solving this notification gap, acknowledging they genuinely do not know how to reach all affected organizations at scale.
Source: Hacker News · Summarized by HeadlinesBriefing