#redirect


Hackers abuse npm mirrors to host phishing redirect pages

Aug 26, 2026 // 00:56

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. The technique […]

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Aug 14, 2026 // 22:25

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat […]

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

May 27, 2026 // 13:08

Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. […]

Popular WordPress redirect plugin hid dormant backdoor for years

Apr 30, 2026 // 01:16

The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users’ […]

Microsoft Warns Governments of Malware Spread via OAuth Redirect Abuse

Mar 3, 2026 // 13:35

Microsoft has warned of phishing campaigns specifically targeting government and public-sector organizations by abusing OAuth redirection mechanisms to deliver malware. Key Details of the Campaign Mitigation and […]