Crypto Heist: The Aftermath of a Government Website Cryptojacking Attack
summary
Uncovering a supply‑chain compromise that infects 5,000+ sites, investigation traces the incident to a Browsealoud asset (likely an S3 breach) that bootstraps a Coinhive miner, with government portals worldwide loading the malicious script; a crawler finds hundreds of public victims, the vendor deletes the file quickly but remediation across agencies is slow, the miner (Monero) nets only a few dozen dollars yet proves the risk; immediate defenses are SRI and CSP fixes and targeted page scoping to stop future skimmers.
AI-written summary · about
chapters (6)
- 0:00Cryptojacking attack intro
- 10:34Malicious JavaScript on gov sites
- 20:42JavaScript vulnerabilities
- 33:22Subresource Integrity and CSP
- 44:21Magecart and modern threats
- 58:24Q&A
related talks
01h 02mCrypto Heist: The Aftermath of a Government Website Cryptojacking Attack
46mCrypto Heist: The Aftermath of a Government Website Cryptojacking Attack
15mTales from the Underground: Hilarious Cybercrime Fails!!
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
25mRaiders of the Javascript-based Malware
31mKeynote: The State of JavaScript Supply Chain Security in 2022
28mWhere Are All of the Container Breaches?