GoKawiilReport URI finds 15,579 websites infected with malicious JavaScript, struggles to notify them
Security firm Report URI says its threat intelligence tools have identified 15,579 compromised websites, collectively receiving an estimated 135 million visits a month. The infections include credit card skimmers, ClickFix malware traps, device-exploitation code and malicious redirects, introduced either through direct site compromises like WordPress flaws or via infected third-party scripts loaded by the sites.
GoKawiil's interpretation of the reporting above, not reported fact.
The disclosure highlights a growing gap between automated detection of web-based attacks and the manual, slow process of notifying affected site owners, which could leave millions of visitors exposed to fraud or malware in the meantime. Report URI's public appeal for help suggests existing responsible-disclosure channels may not scale to the volume of threats modern scanning tools can uncover.
- 15,579 websites were found running malicious JavaScript, with over 135 million combined monthly visits.
- Threats include Magecart card skimmers, ClickFix malware traps, iOS spyware loaders, and malicious redirects.
- Report URI says notification efforts can't keep pace with detection and is publicly seeking solutions.
Source: scotthelme.co.uk — Scott Helme, 2026-11-06
Published there as: “We Know 15,579 Websites Are Infected. How Do We Tell Them?”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.