Crypto Heist: The Aftermath of a Government Website Cryptojacking Attack
summary
Finds a live coin‑mining payload impacting more than 5,000 government sites, traced to a compromised third‑party text‑to‑speech library hosted in an exposed S3 bucket; attackers bootstrap coinhive to mine Monero and collect about 41 payouts before discovery within 24 hours. Uses Google dorks, crawlers, the Wayback Machine and browser consoles to locate victims. Remediation forces vendor to offer versioned files and recommends Subresource Integrity plus Content Security Policy with reporting.
AI-written summary · about
chapters (10)
- 0:00Cryptojacking attack discovery
- 3:10Initial breach investigation
- 7:00Compromised third-party dependency
- 10:10Global supply chain impact
- 13:20Public disclosure and media
- 16:52Government response challenges
- 24:59Solutions and subresource integrity
- 32:58Content security policy defense
- 39:18Evolving JavaScript threats
- 44:10Summary and Q&A
related talks
01h 02mCrypto Heist: The Aftermath of a Government Website Cryptojacking Attack
59mCrypto Heist: The Aftermath of a Government Website Cryptojacking Attack
15mTales from the Underground: Hilarious Cybercrime Fails!!
36mMining Botnets Reemerge, Bringing Shifts into the Threat Landscape
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
21mRise of Coinminers
25mRaiders of the Javascript-based Malware
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions