The Betsson affiliates website has been compromised by hackers, potentially putting affiliate partner data and payments in jeopardy.
Following a tip off that from affiliate partners who were reporting that their gambling affiliate links were redirecting to “unusual destinations”, an analysis by GamblingIndustryNews.com revealed that the Betsson Affiliates website has been hacked.
All non-logged in users visiting the site (including users who click on all affiliate and sub-affiliate links on Betssongroupaffiliates.com) are redirected (via a WordPress hack & a chain of redirects) to spam websites which serve malware.
full compromised HTML page source code (Pastebin)
The first line of html code served on the page (inclusion of a 3rd party Javascript file) performs a chain of redirects to sites which host nefarious payloads like malware key-loggers.
Upon examination of the JavaScript code itself, one can see it contains obfuscated code which masks a redirect to xttps://local.specialadves.com/1QtY8z).
Obfuscated Javascript Redirection Code (Pastebin)
Also of note is the very out of date WordPress version (current stable version of WordPress is version 5.9.2), and out of date 3rd party plugins which can present attack vectors for hackers.
<meta name="generator" content="WordPress 5.8.4" />
Anyone familiar with basic WordPress security will know that keeping plugins and 3rd party code-libraries up to date is important. The popular CMS software even has an auto-update option….
We would advise users of this affiliate program not to visit the website until it has been cleaned & until the company gets serious about security, and to change your password ASAP.
An experienced iGaming commentator and analyst based in New York City - Jenny reports on regulation and gambling industry news and events.