Governmental Website Hacked To Spread Malware

Malicious actors are compromising legitimate websites—including a government site—by exploiting a Joomla image-gallery plugin vulnerability and using SEO poisoning to get infected pages into top search results; visitors are redirected to malicious domains that display fake antivirus pages to deliver malware or scareware.