Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call centers. The campaign uses Help Traffic Distribution System, or Help TDS, to route visitors from compromised websites, malicious ads, social media, and spam into tech support scams. The pages claim... Weiterlesen: Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Hackers have abused more than 20,000 Cloudflare Pages domains over six months to spread fake Microsoft security alerts and steer users toward scam call…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
36 Quellen
CVE-2026-72072 | Linux Kernel up to 7.2-rc1 macsec net/mlx5e macsec_del_rxsc_ctx use after free (Nessus ID 369276)
35 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-72123 | Linux Kernel up to 7.2-rc3 bcm bcm_delete_rx_op sk use after free (Nessus ID 369276) VVulDB Updatesvor 5 Std.CVE-2026-72251 | Linux Kernel up to 7.2-rc2 nf_nat_sip.c nf_nat_sip buffer overflow (Nessus ID 369276) VVulDB Updatesvor 5 Std.CVE-2026-72135 | Linux Kernel up to 7.2-rc2 TPM Character Device tpm_common_read off out-of-bounds (Nessus ID 369276) VVulDB Updatesvor 5 Std.CVE-2026-72288 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 vgic vgic_prune_ap_list use after free (Nessus ID 369276) VVulDB Updatesvor 5 Std.CVE-2026-74345 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 siw siw_cm.c siw_cm_work_handler use after free (Nessus ID 369276) VVulDB Updatesvor 5 Std.CVE-2026-74377 | Linux Kernel up to 7.1.4 rxe rxe_resp_check_length out-of-bounds (Nessus ID 369276)
+29
11 Quellen
CVE-2020-25720 | Samba LDAP improper authorization (EUVD-2020-18374)
10 weitere Quellen
VVulDB Updatesvor 7 Std.CVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp / EUVD-2026-107496) VVulDB Updatesvor 6 Std.CVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544) VVulDB Updatesvor 6 Std.CVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication (EUVD-2026-102990) VVulDB Updatesvor 6 Std.CVE-2026-111689 | Exrick XBoot up to 3.3.4 getByDepartmentId departmentId authorization (EUVD-2026-102980) VVulDB Updatesvor 6 Std.CVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048) VVulDB Updatesvor 6 Std.CVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)
+4
9 Quellen
GitHub Release: openai/codex vrust-v0.164.0-alpha.10 (22.10.2026)
8 weitere Quellen
GGitHubvor 5 Std.GitHub Release: anthropics/claude-code v2.1.307 (22.10.2026) GGitHubvor 4 Std.GitHub Release: ollama/ollama v0.40.9-rc1 (22.10.2026) GGitHubvor 6 Std.GitHub Release: openclaw/openclaw vrelease-publish/59518bfd2a15-1792626457 (21.10.2026) GGitHubvor 7 Std.GitHub Release: openai/codex vrust-v0.163.0-alpha.11.1 (21.10.2026) GGitHubvor 8 Std.GitHub Release: ollama/ollama v0.40.9-rc0 (21.10.2026) GGitHubvor 6 Std.GitHub Release: telegramdesktop/tdesktop v7.3.3 (21.10.2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4276746/it-security-nachrichten/hackers-abuse-20000-cloudflare-pages-domains-to-push-fake-microsoft-security-alerts/