Skip to content
June 19, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Malware
  • 4200 websites, including U.S. and British government agencies were inserted malware to mine crypto-coins
  • Malware

4200 websites, including U.S. and British government agencies were inserted malware to mine crypto-coins

Do Son February 12, 2018 1 minute read
British government
Add as a preferred
source on Google

According to TheRegister, thousands of websites, including U.S. and British government agencies, were infected with a set of codes on Sunday and for hours on Sunday, causing computers visiting infected Web sites to secretly tap into digital cryptocurrencies. TheRegister said more than 4,200 sites were infected with the malware, a malicious version of the Browsealoud tool developed by Texthelp, a UK software company originally designed to read web content for visually-impaired people.

In recent days, cyber-attacks that exploit malware to infect computers and make them digital diggers hackers have become increasingly rampant. This pattern of attacks has also gained in popularity in recent months as the volume of Bitcoin and other digitally encrypted currencies soars.

TheRegister report that computers accessing infected Web sites will be forced to run software that specifically excludes “Monero” to gain the benefit of hackers behind the scenes.

Neither the United States nor British law enforcement agencies nor Texthelp spokesman commented.

Texthelp previously told The Register that “We are addressing this immediately. Our Browsealoud service has been temporarily disabled whilst our engineering team investigates.”

Source: theregister

Related coverage

  • Beware of Fake Google Meet Invites: ClickFix Campaign Spreading Infostealers
  • Beware of “How to Fix” Button: New Phishing Emails Trick Users into Executing Malicious Commands
  • Black Basta and Cactus Ransomware Groups Weaponize BackConnect Malware
  • Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems
  • Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: British government

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-55884
    ## Summary The Tilt HUD HTTP server exposes state-changing and sensitive-read endpoints...
  • CVE-2026-9142CVSS 9.1
    There is an insecure default credentials vulnerability in NI grpc-device when TLS...
  • CVE-2026-54051CVSS 9.9
    ## Summary The agent sandbox gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`),...
  • CVE-2026-48137CVSS 9.1
    There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband...
  • CVE-2026-50242CVSS 10.0
    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass...
  • CVE-2026-56142CVSS 9.6
    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation...
  • CVE-2026-56141CVSS 9.8
    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover...
  • CVE-2026-54414CVSS 9.8
    FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload...
  • CVE-2026-7515CVSS 9.8
    The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion...
  • CVE-2026-8713CVSS 9.1
    The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • GreatXML BitLocker Bypass: Public PoC Exploit Disclosed
  • Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
  • Weekly Threat Intelligence: June 1 to June 7, 2026
  • Cisco SD-WAN Vulnerability Exploited in the Wild with Root RCE Risks
  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.