Security News > 2020 > July > Hundreds of forgotten corners of mega-corp websites fall into the hands of spammers and malware slingers

More than 240 website subdomains belonging to organizations large and small, including household names, were hijacked to redirect netizens to malware, X-rated material, online gambling, and other unexpected content.

Even Microsoft accidentally allowed some of its own long-forgotten subdomains to slip into the hands of spammers.

The latest list of hijacked subdomains was drawn up by Zach Edwards, who reported the URLs at the end of June to Microsoft as well as the affected organizations, and shared a copy with The Register to verify.

In May, Edwards, who cofounded analytics biz Victory Medium, also spotted malware being served from forgotten Epic Games subdomains.

The Register is in the process of contacting the organizations that have had their subdomains hijacked for comment.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/07/07/microsoft_azure_takeovers/