We Know 15,579 Websites Are Infected. How Do We Tell Them?

Report URI has identified 15,579 websites currently infected with malicious JavaScript, conservatively estimating they receive over 135 million visits per month, with thousands more suspected but not yet confirmed. The infections include credit card skimmers known as Magecart, ClickFix attacks, device exploitation targeting iOS versions, and redirects to phishing pages, stemming from WordPress vulnerabilities, compromised third-party supply chains, XSS flaws, and expired domains revived by a threat group the firm calls DeadTag. The security company says responsible disclosure has not kept pace with its growing threat intelligence capabilities, leaving it unable to notify affected organizations as fast as it finds infections. The disclosure gap matters because infected sites expose millions of monthly visitors to data theft and malware, and Report URI is now publicly asking for help solving the notification problem. What to watch next is whether the security community or automated notification channels can close the disclosure gap before the backlog of unconfirmed infections grows further.