Breaches and incidents
Stadt Duelmen: hacked city websites served fake CAPTCHA malware prompts
The city said attackers altered duelmen.de, duelmen-marketing.de and duelmener-winter.de so that some visitors saw fake “CAPTCHA” security checks from...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The city said attackers altered duelmen.de, duelmen-marketing.de and duelmener-winter.de so that some visitors saw fake “CAPTCHA” security checks from Tuesday 16:46 to Wednesday 15:30; users who entered the requested key combinations may have installed malware. No data was exfiltrated according to current findings.
- Root cause: per the city’s initial investigation, the attack was possible via a contact form; it came from a domain registered in Czechia.
- No attacker named.
- The malicious code was removed, the contact form component replaced, other pages checked, and the city will file a criminal complaint; it advised affected users to check their devices.