It’s Been a Year and georgia.gov Continues to Be Hacked
Now, unfortunately, I do not have screenshots of what the Google results looked like, but medicicnes might give you a good idea what the pages were about: They redirected to sites that illegally sold dubious medicine.
I thought this was pretty interesting, so I contacted the New York Times and also fired an email off to the contact link listed on the Georgia website. Both parties ignored me and I forgot about it. Until now.
This time around, the results were much harder to find, as since then a lot of government websites have been infiltrated by AI. A little history sleuthing, however, lead me back to the fatal misspelling of medicine that I couldn’t quite remember. Are the redirects still up?
team.georgia.gov is reportedly For State of Georgia Employees. I don’t think it’s fair to make government employees share their space with hackers. This is a bad look — especially as it’s been unpatched for a year now. It’s a bad look that my contact attempt was ignored. Step it up, Georgia.
I was curious if I could figure out how this happened. I’m also curious how this ended up in the Google index (as sitemap.xml is empty and ahrefs reports zero backlinks). Visiting team.georgia.gov/medicicnes directly shows an Apache 404 page:
