Saturday, November 2, 2024
HomecryptocurrencyHackers Сovertly Mining Cryptocurrency on Government Websites in India

Hackers Сovertly Mining Cryptocurrency on Government Websites in India

Published on

Malware protection

Almost all government sites in India have been infected by malware that uses the power of visitors’ computers to extract cryptographic material using the CoinHive script.

India’s official government sites have become the primary target for cryptocurrency, The Economic Times reports. The attack on the computers leads to malware that uses the processing power to extract the cryptocurrency in favor of the attacker, without the knowledge of the computer owner.

A new study by cybersecurity analysts shows that government sites with very high levels of trust have been subjected to web-based injections (code injection), including one of the latter that infected the Andhra Pradesh administration page.

- Advertisement - SIEM as a Service

The experts identified the infected sites as one of the most visited resources in the country. The government of India confirmed that the attack actually took place, but so far the problem has not been resolved. The volumes of tokens on government sites have also not been disclosed yet.

“Hackers are targeting government sites because these pages have extremely high traffic, which facilitates mining, plus visitors trust the content of the website. It wouldn’t occur to anyone that a provincial or state administration website would contain malicious code. Previously, we watched such sites being cracked; now web injections are in fashion because that’s how an attacker can make a lot of money,” the research authors say.

Along with government domains, CoinHive have infected 119 more Indian sites. The researchers warn that, in addition to these government sites, of particular interest to hackers are sites of illegal video streaming, because while the user watches a movie or series script has the ability to fully load the processor machine. This original idea only confirms that outsourcing in India is not a bad idea.

Hidden mining brings a noticeable profit to cybercriminals. Only a month ago, researchers from RWTH Aachen University, Germany, calculated that the script CoinHive, which infected sites around the world, mines more than 250 thousand USD per month in Monero.

This is mainly done through the process of the hidden use of computing resources on people’s computers without their consent.

Since browser extensions do not require user rights, the software can simply operate in a hidden mode. This results in attackers adding mining functionality to their websites as a means of generating additional revenue.

Although CoinHive is not the only mining extension for a browser, it has been found to have the highest usage share – over 75% of browser usage.

CoinHive does a lot of damage to the industry. The fact that CoinHive is widely used among website owners has a bad impact on the cryptographic industry as a whole. CoinHive script itself is not officially a virus – the authors of this software suggest using extensions as a way to monetize those resources where there is no advertising.

Latest articles

LightSpy iOS Malware Enhanced with 28 New Destructive Plugins

The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS...

ATPC Cyber Forum to Focus on Next Generation Cybersecurity and Artificial Intelligence Issues

White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch...

New PySilon RAT Abusing Discord Platform to Maintain Persistence

Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan...

Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

18 Individuals Charged for Widespread Manipulation Cryptocurrency Markets

18 individuals and entities have been charged with widespread fraud and manipulation within the...

FBI Warns that North Korean Hackers Aggressively Attacking Employees of Crypto Companies

The FBI has issued a stark warning to cryptocurrency companies, highlighting increased sophisticated cyberattacks...

Russian National Arrested for Laundering Crypto Payments from Lazarus Group

Argentine authorities have arrested a Russian national accused of laundering cryptocurrency payments linked to...