700+ education and tech websites hijacked

[fink]

700+ education and tech websites hijacked in huge ClickFix malware campaign

Attackers are abusing a critical Ghost Content Management System (CMS) vulnerability to hijack more than 700 legitimate websites and inject a fake Cloudflare verification step that tricks visitors into running a Windows command that installs malware.

https://www.malwarebytes.com/blog/bu...lware-campaign

[Steve R Jones]

OUCH.... No rest for the weary.