We Know 15,579 Websites Are Infected. How Do We Tell Them?

Re:We Know 15,579 Websites Are Infected. How Do We Tell Them? by Scott_Helme_ on Friday November 06, 2026 @04:37PM (#50398857)

Hey, OP here!

I've posted an update to address many of the comments here on HN and also across social media, you can find it here:

https://scotthelme.co.uk/we-know-15-579-websites-are-infecte...

[ Parent | on HN ]

Re:We Know 15,579 Websites Are Infected. How Do We Tell Them? by WarOnPrivacy on Friday November 06, 2026 @05:10PM (#50399170)

You gave email addresses to contact you - for NCSC/CERT and for entities who want to incorporate your threat intelligence data into their protection models.

What's the email address for owners of 1 or 1000 sites to find out if they're listed in your stewpot?

[ Parent | on HN ]

Re:We Know 15,579 Websites Are Infected. How Do We Tell Them? by Scott_Helme_ on Friday November 06, 2026 @06:23PM (#50399880)

They could just use the same email address if they read the post and want to know.

[ Parent | on HN ]

Re:We Know 15,579 Websites Are Infected. How Do We Tell Them? by WarOnPrivacy on Sunday November 08, 2026 @01:20PM (#50415663)

I appreciate that. A business I know found and cleaned a skimmer this week (Magecart iirc). They may want to know whether their site is listed.

[ Parent | on HN ]

Re:We Know 15,579 Websites Are Infected. How Do We Tell Them? by mceachen on Friday November 06, 2026 @06:21PM (#50399870)

Can't you do a .well-known or DNS handshake (like certbot) so people prove domain ownership, then hand then the report of what you found on their domain?

[ Parent | on HN ]