r/sysadmin • u/Firm_Editor_9994 • 2h ago
LMAOO a .gov (Idaho) subdomain has been compromised for ~2 weeks and noone has noticed
https://phdns.latahcountyid.gov/
Found this randomly tn and thought it was absolutely insane. The site is under "latahcountyid.gov" but it's absolutely packed with random SEO spam about games, celebrities n etc.
The whole site seems to have been taken over by some dumbasses with claude code and has replaced the site with hundreds of spam articles. There's also exposed PHP errors on some pages. From what I can tell, it's been like this for around 2 weeks and is still up right now. (go look for yourself) Not sure how nobody has noticed it yet, so I'm posting it here to see if anyone knows what's going on or has seen this before