US and UK government computers hijacked by cryptocurrency-mining malware

Over this past weekend, US and UK government websites and reportedly, thousands of others worldwide, have been exploited by a malware that hijacks visitors’ computers to mine cryptocurrency.

The hacked websites included the UK Information Commissioner’s Office (ico.org.uk), UK Student Loans Company, Barnsley Hospital, and the website for the American court system (uscourts.gov).

The malware has been first detected by Scott Helme, an Information Security Consultant from the UK. In an online post, Helme said the malware had now been disabled.

The malware, called Coinhive, leveraged the victims’ devices to generate the cryptocurrency Monero by performing mining calculations.

The Monero startup subsequently closed its website, and was in maintenance mode. The site seems to be operational at the time of writing this post.

As an article on TechCrunch explains, “In order to get the crypto-mining software onto unsuspecting computers, the hack targeted an accessibility plugin called Browsealoud that makes the web easier to use for people with dyslexia or low English comprehension. After compromising Browsealoud, the hackers altered the plugin’s code, injecting malicious JavaScript in order to secretly run the mining software known as Coinhive on unsuspecting machines.”

The maker of the plug-in, Texthelp, confirmed that its product was breached for four hours by the mining malware.

Recently, there has been a noticeable uptick in cyberattacks focused on cryptocurrency-mining malware that without authorization takes advantage of available CPU resources to make money.

Just last month, cybersecurity firm CrowdStrike highlighted the rise of malicious cryptocurrency mining, a relatively new type of crypto attacks. The startup wrote that it “expects to see much more” of this activity in 2018.

According to a November 2017 report, Coinhive has become the sixth most common form of malware. It has previously been discovered in Google ads, the Ultimate Fighting Championship website, and TV network Showtime, among many others.

Image credit: Scott Helme. White text is the original code and purple text is the code injected by the attacker

Related News

Parent company of New York Stock Exchange is building Bitcoin platform

The owner of the New York Stock Exchange (NYSE) is reportedly considering building a Bitcoin trading platform, The New York Times

Read-more

Rakuten adds cryptocurrency to Viber and more services in future

Japanese ecommerce giant Rakuten will launch its new Rakuten Coin cryptocurrency in Russia. They plan to launch the coin within the next six months

Read-more

Bitcoin Mining Uses More Electricity than All the Electric Cars in the World

Bitcoin’s power consumption is now making news. Mining Bitcoin has now become a seriously energy intensive affair. In fact, the mining process now consumes

Read-more

Coinbase Customers Can Now Spend Bitcoins, Ethers And XRP Wherever Visa Cards Are Accepted

Coinbase will start issuing its own debit cards that will be accepted around the world. The

Read-more