US and UK government computers hijacked by cryptocurrency-mining malware

Over this past weekend, US and UK government websites and reportedly, thousands of others worldwide, have been exploited by a malware that hijacks visitors’ computers to mine cryptocurrency.

The hacked websites included the UK Information Commissioner’s Office (ico.org.uk), UK Student Loans Company, Barnsley Hospital, and the website for the American court system (uscourts.gov).

The malware has been first detected by Scott Helme, an Information Security Consultant from the UK. In an online post, Helme said the malware had now been disabled.

The malware, called Coinhive, leveraged the victims’ devices to generate the cryptocurrency Monero by performing mining calculations.

The Monero startup subsequently closed its website, and was in maintenance mode. The site seems to be operational at the time of writing this post.

As an article on TechCrunch explains, “In order to get the crypto-mining software onto unsuspecting computers, the hack targeted an accessibility plugin called Browsealoud that makes the web easier to use for people with dyslexia or low English comprehension. After compromising Browsealoud, the hackers altered the plugin’s code, injecting malicious JavaScript in order to secretly run the mining software known as Coinhive on unsuspecting machines.”

The maker of the plug-in, Texthelp, confirmed that its product was breached for four hours by the mining malware.

Recently, there has been a noticeable uptick in cyberattacks focused on cryptocurrency-mining malware that without authorization takes advantage of available CPU resources to make money.

Just last month, cybersecurity firm CrowdStrike highlighted the rise of malicious cryptocurrency mining, a relatively new type of crypto attacks. The startup wrote that it “expects to see much more” of this activity in 2018.

According to a November 2017 report, Coinhive has become the sixth most common form of malware. It has previously been discovered in Google ads, the Ultimate Fighting Championship website, and TV network Showtime, among many others.

Image credit: Scott Helme. White text is the original code and purple text is the code injected by the attacker

Related News

UK Real Estate Firm Accepts Bitcoin for Sale of 150-Year-Old Church

A 150-year old church in England is up for sale for about 181 bitcoin. Finest Properties, Corbridge

Read-more

Dock.io is poised to make Internet more decentralized and democratic, where user owns data

We spend years building our online presence on platforms like LinkedIn, Upwork, Glassdoor in the form of work experiences,

Read-more

Increasing Concerns About Bitcoin Mining Heaven on Columbia River, Washington

A small town in Washington state is a cryptocurrency mining haven as it is home to a hydroelectric dam system that harnesses the

Read-more

Donate to the Tor Project in 9 Different Cryptocurrencies

The Tor Project, a well-known nonprofit, is now accepting cryptocurrency donations. Tor’s donations page has been listing cryptocurrency addresses since March 18

Read-more