One Plugin, Over 4,200 Victims – When Thousands of Government Websites Were Hijacked to Mine Monero

Rafia Shaikh reports:

Thousands of websites around the world were targeted by cryptojackers over the weekend to mine Monero. The targets included websites run by the US and UK governments that were secretly hijacked by attackers to mine cryptocurrency using a compromised plugin, Browsealoud.

Over 4,200 websites are in the victims list [link], including The City University of New York, the US court information portal (uscourts.gov), Lund University, the privacy watchdog The Information Commissioner’s Office (ICO), and several other government, health and educational websites across the world.