Over 2,000 Betting Links Removed From Cricket Association of Nepal Website After Public Report

Kathmandu. Thousands of unauthorized betting-related links found embedded on the official website of the Cricket Association of Nepal (CAN) have been removed after the issue was reported publicly.

The removal came after TechPana reported on Friday that more than 2,000 betting platform links had been discovered on CAN’s official website. Following the publication of the report, the association took down all the suspicious and harmful links. However, CAN has not issued any formal statement explaining how the unauthorized links were inserted into its system.

Cybersecurity experts say the incident appears to be a case of “Black Hat SEO spam injection,” a technique in which hackers exploit high-traffic websites to secretly embed malicious or irrelevant links that are not visible to regular users on the surface.

Experts suggest several possible causes behind the breach, including a potential website compromise, misconduct or negligence by a web developer, unauthorized access to the site’s backend repository, or vulnerabilities in themes or plugins used in the website’s structure.

Security specialists warn that such injections can seriously damage a website’s credibility and search visibility. If not detected and removed in time, search engines like Google may flag or blacklist affected websites, significantly reducing their online reach. There is also a risk that users could be exposed to malicious content or cyber threats through hidden links.

Similar incidents have previously been reported on other institutional websites, including that of the Nepal Telecommunications Authority.

Cybersecurity expert Bijay Limbu said the recurring nature of such incidents highlights serious gaps in digital security practices. He said the absence of strong cybersecurity guidelines remains a key challenge.

“Security issues keep happening because we still lack clear and strict cybersecurity standards,” Limbu said. “Without proper legal and technical frameworks, websites cannot be fully secure. Security must be integrated from the design stage itself.”

He added that principles such as “Security by Design,” “Privacy by Design,” and “Resiliency by Design” should be embedded in all public digital systems.

पछिल्लो अध्यावधिक: जेठ ३, २०८३ १६:२७

टिप्पणीहरू