Who and What Is Coinhive?

Multiple security firms recently identified cryptocurrency mining service Coinhive as the top malicious threat to Web users, thanks to the tendency for Coinhive’s computer code to be used on hacked Web sites to steal the processing power of its visitors’ devices. This post looks at how Coinhive vaulted to the top of the threat list less than a year after its debut, and explores clues about the possible identities of the individuals behind the service. Continue reading Who and What Is Coinhive?

Browsealoud plugin hacked to mine Monero on 4,000 Govt websites

By Waqas
There were thousands of UK and US government websites mining Monero
This is a post from HackRead.com Read the original post: Browsealoud plugin hacked to mine Monero on 4,000 Govt websites
Continue reading Browsealoud plugin hacked to mine Monero on 4,000 Govt websites

Government websites, including uscourts.gov, pulled into cryptomining scheme

A slew of government websites, including the site run by the United States federal court system, were among the thousands pulled into a cryptomining scheme via a third-party browser plugin. Scott Helme, a security researcher based in the United Kingdom, found malicious code planted on websites through Browsealoud, an accessibility plugin that reads websites for people with vision problems. Since the plugin is added to a site’s source code, any site running the plugin was co-opted into a scheme to mine Monero. Ummm, so yeah, this is *bad*. I just had @phat_hobbit point out that @ICOnews has a cryptominer installed on their site… 😮 pic.twitter.com/xQhspR7A2f — Scott Helme (@Scott_Helme) February 11, 2018 Among those affected are health care sites in the U.K., university sites in Sweden and makeup retail sites based in Brazil. In the U.S., uscourts.gov, Indiana’s state website and wmata.com, the website for the Washington Metro Area Transit […]

The post Government websites, including uscourts.gov, pulled into cryptomining scheme appeared first on Cyberscoop.

Continue reading Government websites, including uscourts.gov, pulled into cryptomining scheme