Network Solutions Sites Hacked By Wicked Widget
Summary: Armorize traced a mass infection of Network Solutions parked and 'under construction' pages to the 'Small Business Success Index' widget served from the company's GrowSmartBusiness.com blog, which Armorize believes hackers tainted after compromising that domain with a remote-control web hacking tool. Armorize estimated from search results that 500,000 to 5 million Network Solutions domains may have served the infected widget, while Network Solutions said its preliminary analysis put potentially affected under-construction pages at less than 120,000.
What's compelling: The malicious widget pushed a Trojan dropper that only 25 of 52 anti-virus programs on Virustotal.com flagged, and the payload was geotargeted at Chinese surfers with a fake Tencent QQ alert - a reminder that a single compromised widget on a registrar's default parked pages can reach hundreds of thousands of domains while most scanners miss the payload.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026