Hundreds of forgotten corners of mega-corp websites fall into the hands of spammers and malware slingers

Hundreds of forgotten corners of mega-corp websites fall into the hands of spammers and malware slingers

More than 240 website subdomains belonging to organizations large and small, including household names, were hijacked to redirect netizens to malware, X-rated material, online gambling, and other unexpected content.


These big names are said to include Chevron, the Red Cross, UNESCO, 3M, Getty Images, Hawaiian Airlines, Arm, Warner Brothers, Honeywell, Autodesk, Toshiba, Xerox, the NHS, Siemens, Volvo, Clear Channel, Total, and more.


And it's all due to the way they were hosted in Microsoft's Azure cloud.


Take Xerox for example. One of its subdomains, advanced.core.freeflow.xerox.com, was commandeered to host pages linking to websites advertising escorts, kitchenware, oil paintings, and more, in the hope that the reputation of xerox.com would boost the linked-to sites in web search engine rankings.


At one point advanced.core.freeflow.xerox.com was hosted in the Microsoft cloud on a server named something ..

Support the originator by clicking the read the rest link below.