A website hijacking campaign has compromised over 150,000 websites.The attackers use iframe injections to display a full-screen overlay in the visitor's browser.The overlays impersonate legitimate betting websites or serve fake gambling pages.Web admins are advised to audit their code, block malicious domains, and monitor logs for unexpected outgoing requests.