Tech article
We Know 15,579 Websites Are Infected. How Do We Tell Them?
Hacker News | Nov 6, 2026 | speckx
Automated excerpt
Direct compromise - typically a WordPress vulnerability or similar, the site's own JS files are modified to include the malicious JS. DeadTag - a threat group we named recently, buying expired domains that sites still load JS from, reviving them, and serving malware. Right now, we have 15,579 unique sites that are infected with one of the malicious JS attacks listed above.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.