We've identified 15,579 websites that are currently infected with malicious JavaScript and between them, we conservatively estimate that they receive more than 135 million visits every month.
We know they're infected, and we have the evidence to back that up, but there's a problem: how on
Add the websites to existing malware blocklists, ideally ones that are loaded by default by uBlock Origin, and browsers with integrated blocklists.
This would protect visitors, and make the problem harder to ignore for webmasters since lots of visitor would get a big read scary screen. This is a radical option, but fixing this mess would take such a radical action.
It is also devastating for visitors when their savings gets stolen by malware distributed by infected websites.
Notify webmasters and give 1 week to fix the issue. If webmasters fails to fix the issue or are unreachable, adding them to blocklist seems appropriate.