DreamHost: Hijacked Websites Redirect To Russian Scam
ID: 76e2bc3c-94d6-55de-bfa4-161e05cd39dc
STIX ID: report--76e2bc3c-94d6-55de-bfa4-161e05cd39dc
Feed Name: Zscaler Security Research Blog
Threat Score
Following a DreamHost breach, hundreds of hosted sites were hijacked to serve PHP redirects to the Russian scam site otvetvam.com, which links to a fake YouTube clone (tvoitube.com) promoting an online gambling site (cristal-casino.com); the report includes example infected URLs and notes related domain registrations (ru-0tveti.com, ru-0tveti1.com).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.