Government websites hijacked by cryptomining plugin

Share

In a hack of unprecedented scope, thousands of government websites around the world have been compromised as part of a criminal scheme to mine a cryptocurrency called Monero, which like Bitcoin and Ethereum is blockchain based, but with a greater focus on transaction privacy.

The process, known as crypto-jacking, forces a user's computer to mine cryptocurrency without their permission, generating profits for the hacker.

The Queensland ombudsman's official website, the Queensland legislation website and the Queensland Community Legal Centre homepage were also impacted by the cryptojacking attack, The Guardian reported. The more processing power it has access to, such as via thousands of browsers on thousands of websites, the easier it is to generate cryptocurrency.

The exploit was online for four hours in the early hours of Monday, during which time most Australians would have been asleep, and probably not accessing government websites.

Websites such as the UK's NHS and ICO to the U.S. government's court system were just some of the 4,200 sites infected with a malicious version of a widely used tool known as Browsealoud from British software maker Texthelp, which reads out webpages for people with vision problems.

Prez Trump blocks release of memo on Russian probe
Trump on Friday blocked the release of the memo , which seeks to respond to a Republican memo that Trump allowed to be released. McGhan II says the second memo "contains numerous properly classified and especially sensitive passages" and should be revised.

Twitter Reactions As Bolwers Cost India The 4th ODI
However, he ploughed on and when chances presented themselves, he grabbed them with some emphatic pulls and flicks on the on-side. They ended on 207-5, winning with 2.3 overs to spare when Andile Phehlukwayo launched his third six to win the game.

Arsenal boss Wenger: Aubameyang just like Henry
He said he needed to win the league and he got Robin van Persie to score him the goals to get above Manchester City. According to him, the clubs in question attempted to get the playmaker at least by the end of the season.

The malware have infected government sites on Sunday after a browser plug-in made by a third-party was compromised.

Texthelp, the company that provides Browsealoud, has confirmed that the compromised plugin has been taken offline.

Some of the affected websites have been taken offline as Whitehall IT experts battle to defeat the code. The sites of UK's own data protection watchdog and UK's National Health Service were supposedly hit along with other websites.

The National Cyber Security Centre in the United Kingdom has given an official statement on the matter, assuring people that "Government websites continue to operate securely", further stating that "there is nothing to suggest that members of the public are at risk".

Share