Threat Actors Compromise 150,000 Websites to Promote Chinese Gambling Platforms

A large-scale campaign has compromised roughly 150,000 legitimate websites by injecting obfuscated JavaScript and iframes that redirect visitors—especially Chinese-speaking users—to full-screen Chinese-language gambling platforms (examples: zuizhongyj.com, 551007t.cc, W88in.com). The attackers use HTML entity encoding, hex obfuscation, mobile-friendly viewports, and keyword detection to tailor redirects; site owners are advised to audit third‑party scripts, monitor for unauthorized iframes, and implement strict Content Security Policies.