top of page

6 March 2025

35,000+ Websites Hacked To Inject Malicious Scripts Redirecting Users To Chinese Websites

35,000+ Websites Hacked To Inject Malicious Scripts Redirecting Users To Chinese Websites

A massive cybersecurity breach has compromised over 35,000 websites, injecting malicious scripts that completely hijack users’ browser windows and redirect them to Chinese-language gambling platforms.


Security experts suggest this campaign may be connected to the Megalayer exploit, known for distributing Chinese-language malware.


Website owners are advised to audit their source code for unauthorized script tags, block the malicious domains through firewall rules, regularly check for unauthorized file modifications, implement Content Security Policy restrictions, and perform frequent site scans using tools like PublicWWW or URLScan to uncover malicious injections.

Copyright @2024 The University of Hong Kong. All Rights Reserved.
bottom of page