Our takeHelp TDS, tied to the Hotejka affiliate program, has run since at least 2017 by planting PHP on compromised sites to feed victims into Microsoft tech support scams hosted on 20,000+ Cloudflare Pages domains. Treat unexpected "security" warnings as malicious; close the tab and avoid any prompted calls or downloads.Security Resilience desk
Sources (2)
- hackernews · hackernews
- darkreading · darkreading