logo

College & Govt Sites Still Redirecting To Fake Stores

ID: 0954358e-2981-5dfc-8cdb-26cb5f763cda

STIX ID: report--0954358e-2981-5dfc-8cdb-26cb5f763cda

Feed Name: Zscaler Security Research Blog

Threat Score
60/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

A widespread website-hijacking campaign redirected visitors from compromised college and government sites to uniform fake software stores. The campaign persisted for months, used alternate servers and non-standard ports for some redirects, affected dozens of domains (68 found in one day), and largely evaded browser denylists and antivirus detection, prompting the author to recommend a browser protection add-on.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.