UK NCSC Confirms Mining Virus Attack on Government Websites, Australia Also Affected
TechnologyBit News Today2 min read
The UK's National Cyber Security Centre (NCSC) confirmed today that several government websites and web applications have been breached by a cryptocurrency mining malware program. Australian government websites also reported being affected.
The crypto mining virus infects websites and web applications to secretly mine Monero cryptocurrency by hijacking the processing power of site visitors. Unverified sources have reported the attackers may be using the software to mine through the websites. ## The Details
Briefly, here's the timeline of events:
- At least three UK government websites had the mining malware infect server infrastructure, the NCSC said. They declined to name the specific sites, saying a full list would be released once the investigation concludes. - The Australian Cyber Security Centre (ACSC) said its government websites were affected, adding it was working with the "appropriate law enforcement and international security authorities" to resolve the issue. - The NCSC said "several" web applications had been attacked. It also noted "many thousands" of people had been affected, meaning that number could be larger than that.
This is the second major incident to strike government websites in the past six months.
In October, an online security company reported that several government websites in the UK and US had been infected with a cryptojacking script called Coinhive. Coinhive allows websites to use visitors' processing power to mine cryptocurrency, just like the mining script used in this attack.
There are no reports of users being at risk, but the NCSC said it was still investigating the impact. ## What Happens Now?
As the investigation is ongoing, the NCSC and ACSC said they were unable to provide any further information at this time.
They urged users not to panic and confirmed there was no evidence of user data being compromised. The NCSC advised any website administrators who might be concerned about their systems to run security checks and follow their verified advice on how to conduct those.
This latest hack once again focuses attention on the need for improved IT security at the government level. Late last year, the NCSC urged the UK to invest more in digital defenses in response to the Coinhive attack. ## The Bigger Picture
The NCSC has said that the use of cryptojacking scripts is on the rise. While it's good that the NCSC is bringing these attacks to light, the question remains as to what can be done to prevent them in the future.
There are tools available to help site administrators detect and block these scripts, but it's difficult to keep up with the constant updates and new methods of attack.
The NCSC has urged organizations to run regular security checks and keep their software up to date. It also recommends using reputable security services and keeping an eye out for unusual activity.
While this latest attack is concerning, it's important to remember that cryptojacking is far from the most serious cyber threat out there. That said, it does highlight the need for improved security measures at all levels, from individual users to major organizations and governments.
In the meantime, site administrators and users can take steps to protect themselves, such as keeping their software up to date, using reputable security services, and being vigilant for unusual activity.
