Infected websites redirect their visitors’ traffic to malware-spreading pages

[tao]

An ongoing campaign is aggressively targeting legitimate web pages powered by insecure CMSs (Content Management Systems). The attackers’ objective is to inject malicious code – specifically EITest code – into these vulnerable websites.

 

As a result, when users visit the compromised websites, they will be automatically redirected to pages such as the ones below (selection sanitized for your protection):

 

[...]

 

As always, we’d like to close this alert with a few protection steps you can take:

• Explore the benefits of traffic filtering;
• Listen to the experts and keep all your software up to date all the time;
• And secure your data and devices with multiple layers.

 

Ref:  < https://heimdalsecurity.com/blog/security-alert-compromised-websites-ransomware-financial-malware/ >