What You Need to Know About Why are top university websites serving porn? It ...
A handful of hijacked columbia.edu subdomains listed by Google One of the sites redirected by a UC Berkeley subdomain. Websites for some of the world’s most prestigious universities are serving explicit porn and malicious content after scammers exploited the shoddy record-keeping of the site administrators, a researcher found recently. The sites included berkeley.edu, columbia.edu, and washu.edu, the official domains for the University of California, Berkeley, Columbia University, and Washington University in St. Louis. Subdomains such as hXXps://causal.stat.berkeley.edu/ymy/video/xxx-porn-girl-and-boy-ej5210.html, hXXps://conversion-dev.svc.cul.columbia[.]edu/brazzers-gym-porn, and hXXps://provost.washu.edu/app/uploads/formidable/6/dmkcsex-10.pdf. All deliver explicit pornography and, in at least one case, a scam site falsely claiming a visitor’s computer is infected and advising the visitor to pay a fee for the non-existent malware to be removed. In all, researcher Alex Shakhov said, hundreds of subdomains for at least 34 universities are being abused. Search results returned by Google list thousands of hijacked pages.
Hijacking a university's good name
Scammers like Hazy Hawk then swoop in by hijacking the old record.Read full article Comments Shakhov, founder of SH Consulting, said that the scammers—which a separate researcher has linked to a known group tracked as Hazy Hawk—are seizing on what amounts to a clerical error by site administrators of the affected universities. When they commission a subdomain such as provost.washu.edu, they create a CNAME record, which assignes a subdomain to a "canonical" domain. When the subdomain is eventually decommissioned—something that happens frequently for various reasons—the record is never removed.
Related Articles
- How to Install the watchOS 26.5, tvOS 26.5, and visionOS 26.5 Release Candidate Betas
- Lessons from The Mythical Man-Month: Brooks’ Timeless Wisdom on Software Development
- 7 Key Insights on How Microsoft Azure is Powering Europe's Digital Transformation
- How to Decipher the Googlebook Announcement: 8 Critical Questions Answered
- Breaking: 'RuPaul's Drag Race All Stars 11' Premieres Tonight with 18 Queens, Three Brackets, and a Historic Two-Episode Debut
- Swift 6.3: A Deeper Dive into New Features and Improvements
- Two Standout Features in Ptyxis Terminal (The New Default for Ubuntu)
- Enhancing Search Reliability in GitHub Enterprise Server: A High Availability Overhaul