As cited
Copy frozen at (site build).
threat intel
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A traffic distribution system (TDS) called Help TDS, linked to a Russian-language affiliate program named Hotejka, has been active since at least 2017 and distributes tech support scams through compromised websites. Over 20,000 Cloudflare Pages domains are currently hosting this malicious infrastructure, which uses PHP code templates to redirect users to fraudulent tech support services.
Why it matters: Website administrators and Cloudflare users need to audit their domains for unauthorized redirects and malicious code; end users face exposure to tech support scams that harvest credentials and payment information through domains they may trust.
- Source published
- First seen by Cybersecurity Tracker