Hacker Takes Over Coinhive DNS Server After Company Reuses Old Password

itman · Oct 25, 2017

A great example of why coin mining should be banned.

An unknown attacker has hijacked Coinhive's DNS server and replaced the legitimate Coinhive JavaScript in-browser miner with a malicious version that mined Monero for the hacker's own wallet.

According to a Coinhive spokesperson, the incident took place yesterday, October 23, at around 22:00 GMT, and was discovered and resolved a day later.

Coinhive says the hacker logged into the company's Cloudflare account and replaced DNS records, pointing Coinhive's domain to a new IP address.

This new server pushed a custom version of the coinhive.min.js file that contained a hardcoded site key.

Thousands of sites around the world loaded this modified Coinhive script that mined Monero for the hacker, instead of legitimate site owners. A Coinhive spokesperson told Bleeping Computer the hacker had control over its domain name for about six hours.
Click to expand...

https://www.bleepingcomputer.com/ne...dns-server-after-company-reuses-old-password/

Log in or Sign up

Hacker Takes Over Coinhive DNS Server After Company Reuses Old Password

itman Registered Member

Log in or Sign up

Hacker Takes Over Coinhive DNS Server After Company Reuses Old Password

itman Registered Member

Useful Searches