Government websites fall prey to cryptocurrency mining hijack

It’s not just private companies’ websites falling victim to cryptocurrency mining hijacks. Security consultant Scott Helme and the Register have discovered that intruders compromised over 4,200 sites with Coinhive’s notorious Monero miner, many of them government websites from around the world. This includes the US court info system, the UK’s National Health Service and Australian legislatures, among others. The intruders spread their JavaScript code by modifying an accessibility plugin for the blind, Texthelp’s Browsealoud, to inject the miner wherever Browsealoud was in use.

The mining only took place for several hours on February 11th before Texthelp disabled the plugin to investigate. Government sites like the UK’s Information Commissioner’s Office also took pages down in response. As with most of these injections, your system wasn’t facing a security risk — you would have just noticed your system bogging down while searching for government info. The mining goes away the moment you visit another page or close the browser tab. The biggest hassle was for the site operators, who are now discovering that their sites are vulnerable to intruders slipping in rogue code without verification.

Leave a Reply

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: