Report URI found 15,579 infected websites and cannot reach their operators
Scott Helme says the sites get an estimated 135 million visits a month, and low security.txt use leaves most disclosure emails unanswered.
By Ryan Merket · Published
Primary source: scotthelme.co.uk
Why it matters
Report URI says it has found infected sites whose operators are difficult to reach because security.txt use is low, many sites hide behind CDNs and disclosure emails go unanswered. The infections include skimmers, fake verification lures and iOS spyware delivery on regional sites with large local audiences. Helme is asking national cybersecurity centers and CERTs for help notifying operators.
Scott Helme, founder and chief executive of Report URI, said on November 6th that the company has identified 15,579 websites currently serving malicious JavaScript and cannot notify most of their operators at scale. Helme estimated that the infected sites receive more than 135 million visits a month combined, using what he described as ultra-conservative traffic estimates.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.