DebugBear DNS Hijack Prompts Script Removal Advice

DebugBear has advised customers to remove its Core Web Vitals monitoring script after attackers hijacked the company’s DNS and used it to serve malicious JavaScript. Search Engine Journal also reported that site owners should review accounts that may have been exposed and look for unauthorized changes.

For marketing teams, the immediate issue is the monitoring script used on their sites. Core Web Vitals are performance measures used to assess aspects of the user experience, and monitoring tools help site owners track those measures. The request concerns DebugBear’s script, rather than a general instruction to remove all performance monitoring from a website.

DNS helps direct requests for online resources. In this incident, attackers hijacked DebugBear’s DNS to distribute malicious JavaScript. The information available for this brief does not establish which individual sites or accounts were affected, what changes may have been made, or what the malicious code did on any particular site.

Site owners should check whether they use the DebugBear monitoring script and follow the company’s instruction to remove it. Marketing teams that do not manage site code directly can pass the request to the colleagues or providers responsible for implementation. Keeping track of who owns that work can help teams confirm that the instruction has been addressed.

The recommended review goes beyond the script itself. Owners should check potentially exposed accounts and examine their sites for changes they did not authorize. Those checks should be treated as a precaution; the available information does not establish that every customer experienced account exposure or unauthorized changes.

What this means for marketers

Coordinate with the people responsible for your website to identify and remove the DebugBear script if it is in use. Ask them to review potentially exposed accounts and look for unauthorized changes, then document what has been checked. Avoid assuming that a site was unaffected merely because no visible change has been noticed.