CNCERT Investigation: Users in Multiple Provinces Saw Traffic Abnormally Redirected to Gambling Sites
China's National Computer Network Emergency Response Technical Team (CNCERT) published an investigation into incidents across multiple provinces in which users' web requests were abnormally redirected to gambling sites. It attributes the attacks to overseas autonomous system AS 402425, registered by US company QOREXA LABS, which hijacked traffic by announcing false routes and tampered with DNS resolution data to point users to gambling sites. The report publishes malicious IP addresses and mitigation advice for registries, carriers, platforms, and users.
SOURCES
- IT之家2026-10-20 04:52