The reports come two days after the highly trafficked website for Dolphin Stadium, host of today's Super Bowl, was infected with a JavaScript-enabled keylogging trojan that took advantage of two previously patched Microsoft vulnerabilities.
In a blog post today, Marcus Sachs, director of the SANS Internet Storm Center, listed about 50 sites that contain the malicious pointers.
He urged system administrators to block network traffic to the sites until it can be confirmed they are free of malware. Users can be infected simply by visiting the websites.
Mikko Hypponen, chief research officer at F-Secure, said some of the hacked sites relate to the Super Bowl.
Sachs, meanwhile, reported that a number of attacks are targeting hospital or medical care sites.
Click here to email reporter Dan Kaplan.
JavaScript malware infecting various websites
Dozens of unrelated websites contain malicious scripts that attempt to infect users' machines with malware, security experts said today.
Got a news tip for our journalists? Share it with us anonymously here.
SPONSORED RESOURCES
Closing the cyber security execution gap: How IT leaders are building cyber resilience
Tech Skills Report
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy

Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC



