US and UK government computers hijacked by cryptocurrency-mining malware

Over this past weekend, US and UK government websites and reportedly, thousands of others worldwide, have been exploited by a malware that hijacks visitors’ computers to mine cryptocurrency.

The hacked websites included the UK Information Commissioner’s Office (ico.org.uk), UK Student Loans Company, Barnsley Hospital, and the website for the American court system (uscourts.gov).

The malware has been first detected by Scott Helme, an Information Security Consultant from the UK. In an online post, Helme said the malware had now been disabled.

The malware, called Coinhive, leveraged the victims’ devices to generate the cryptocurrency Monero by performing mining calculations.

The Monero startup subsequently closed its website, and was in maintenance mode. The site seems to be operational at the time of writing this post.

As an article on TechCrunch explains, “In order to get the crypto-mining software onto unsuspecting computers, the hack targeted an accessibility plugin called Browsealoud that makes the web easier to use for people with dyslexia or low English comprehension. After compromising Browsealoud, the hackers altered the plugin’s code, injecting malicious JavaScript in order to secretly run the mining software known as Coinhive on unsuspecting machines.”

The maker of the plug-in, Texthelp, confirmed that its product was breached for four hours by the mining malware.

Recently, there has been a noticeable uptick in cyberattacks focused on cryptocurrency-mining malware that without authorization takes advantage of available CPU resources to make money.

Just last month, cybersecurity firm CrowdStrike highlighted the rise of malicious cryptocurrency mining, a relatively new type of crypto attacks. The startup wrote that it “expects to see much more” of this activity in 2018.

According to a November 2017 report, Coinhive has become the sixth most common form of malware. It has previously been discovered in Google ads, the Ultimate Fighting Championship website, and TV network Showtime, among many others.

Image credit: Scott Helme. White text is the original code and purple text is the code injected by the attacker

Related News

Buy Smart Anti-Snore Sona Pillows With Bitcoin Via Coinbase

Sona Pillow, an Arizona-based retailer selling anti-snore pillows, now accepts Bitcoin. In an update published on

Read-more

Buy goods with 1,500+ cryptocurrencies and no fees on OpenBazaar

In the days past, bazaars were places where everyone could sell and buy with no middlemen, nor authority overseeing.

Read-more

Square Adds Support for Bitcoin Deposits in Cash App

“5PM. Direct deposit hits. Do you buy Bitcoin, or do you cash out instantly to another bank? With Cash App, you decide.”

Read-more

Melissa, a Verification Solutions Provider, Started to Accept Bitcoin

We can buy pretty much anything for Bitcoin. But, since last month, it’s possible to purchase identity verification

Read-more