How does this work guys? Need your insight! PLUS FREE..

Could anyone please help me understand how content/link was posted to the websites listed below?

https://generac.com/getmedia/6c89f02a-0f17-40b9-802f-444a8fbf9a5d/19bsgshttps://bethere.org/getmedia/659ed2f1-5a4e-4f6d-97b2-63241875a906/2jmik6https://www.scc-inc.com/getmedia/f1c251a5-a3e0-42c3-bd02-e8822a015d24/0nmfdl
Thank you in advance

jaydeb99 said:

Could anyone please help me understand how content/link was posted to the websites listed below?

https://generac.com/getmedia/6c89f02a-0f17-40b9-802f-444a8fbf9a5d/19bsgshttps://bethere.org/getmedia/659ed2f1-5a4e-4f6d-97b2-63241875a906/2jmik6https://www.scc-inc.com/getmedia/f1c251a5-a3e0-42c3-bd02-e8822a015d24/0nmfdl
Thank you in advance

Click to expand...

This is what is called as "media highjacking".

What happens is that a site admin installs a malicious plugin or they have a vulnerability that allows a threat actor to upload "poison files".

In this case the posion file is an html page which gets shown in the static media folder of the sites.

Basically, in simpler words, site administrator fucked up and a hacker took advabtage of the situation.

Grateful for your generous help in clearing up my doubts. Thank you!