World Bulletin / News Desk
Thousands of websites around the world, including many operated by governments, have been infected by hackers using the sites' computing power to "mine" cryptocurrencies, security researchers said.
The attacks made public over the weekend by British security researcher Scott Helme showed more than 4,000 website were infected in this manner, including those of the British data protection and privacy watchdog and the US federal courts system.
Unlike traditional attacks, these infections do not contain "ransomware" or steal data, but operate in stealth mode to make profits from the shadowy world of cryptocurrencies.
Helme said in a blog post Sunday that the hackers were able to reach large numbers of websites by infecting a commonly used "plug-in," or software which helps a site run better.
In this case, the hackers used the malicious software to create Monero, one of several new cryptocurrencies which are making a splash in financial markets.
"If you want to load a crypto miner on 1,000+ websites you don't attack 1,000+ websites, you attack the 1 website that they all load content from," he said.
The creator of the plug-in, the British software firm TextHelp, said it took the affected software offline after it discovered the "attempt to illegally generate cryptocurrency. "
"This was a criminal act and a thorough investigation is currently underway," the company said in a statement.
Researchers have been warning in recent weeks about this kind of malware, which can deliver profits without being obvious to users.
Security researchers at Cisco Talos warned last month that this kind of hacking activity "has exponentially increased."
Because of the huge financial gains in cryptocurrencies, Cisco researchers said this has become a prime target for hackers.
"At a high level mining is simply using system resources to solve large mathematical calculations which result in some amount of cryptocurrency being awarded to the solvers," Cisco researchers wrote in a research note.
Security researcher Graham Cluley said the latest attack highlights vulnerabilities in websites which may have weaknesses in third party components.
"Things could have been much worse," Cluley said in a blog post. "Imagine if the plug-in had been tampered with to steal login passwords rather than steal CPU resources from visiting computers."
The investment will be primarily led by Samsung Electronics, the world's biggest maker of memory chips, which has faced a string of setbacks in recent years, including a fall in smartphone sales and a corruption scandal that saw its vice-chairman Lee Jae-yong jailed last year.
Sponsors, including Turkish Airlines, help siblings to attend month-long language course after winning NASA award
Neil Armstrong and his crew commemorated for their historic 1969 landing on the moon in Apollo 11 spaceship
More than 20 people have been butchered by crazed mobs in the past two months across India after being accused of child kidnapping and other crimes in viral messages circulated wildly on WhatsApp.
Company's operating system creates more choices, Google’s CEO says
EU Competition Commissioner Margrethe Vestager spoke by telephone with Google chief Sundar Pichai on Tuesday night to tell him about the decision in advance, a source close to the matter told AFP.
Brad Smith made a case for a government initiative to lay out rules for proper use of facial recognition technology, with input from a bipartisan and expert commission.
This year's sector showpiece event, opening Monday, will be buzzing on the back of rapid changes in the industry, as US titan Boeing and European arch rival Airbus vie for superiority in the skies.
MEERkat sets stage for Square Kilometre Array project, to allow astronomers to see the sky in unprecedented detail
Prominent users see follower counts decrease by millions after removal of accounts deemed suspicious or fraudulent
Social media giant fined £500,000 ($663,042) for failing to protect users’ private information
The deal marks the biggest overseas foray yet for Tesla, which is looking to expand into global markets, plans that faced a potential threat from the intensifying China-US trade row.
Floating robot is first AI-powered machine to help astronauts complete tasks aboard ISS
Turk Telekom supports increase of competition for higher Internet penetration in Turkey