[mothered]

Greetings to all,

Based on personal experience, I can confirm that vulnerabilities exist In all types of organizations- Irrespective of their magnitude. This article has demonstrated just that In the government and corporate sectors, by turning their sites Into cryptocurrency mining platforms. And It was as simple as executing code Injection attacks. Why am I not surprised?

A mass hacking campaign that targets a critical vulnerability in the Drupal content management system has converted more than 400 government, corporate, and university websites into cryptocurrency mining platforms that surreptitiously drain visitors' computers of electricity and computing resources, a security researcher said Monday.

Sites that were hacked included those belonging to computer maker Lenovo, the University of California at Los Angeles, the US National Labor Relations Board, the Arizona Board of Behavioral Health Examiners, and the city of Marion, Ohio, Troy Mursch

The Social Security Institute of the State of Mexico and Municipalities, the Turkish Revenue Administration, and Peru's Project Improvement of Higher Education Quality were also affected.

The highly obfuscated code caused visitors' computers to dedicate 80 percent of their CPU resources to mining the digital coin known as Monero with no notice or permission.

Source.

[Bish0pQ]

I have heard about the Drupal exploit and already expected that some sites would be vulnerable. Surprised it spread to big companies though. You'd think they would be better protected against something like this.

[TheCrazyOne]

Heard about that exploit a little while back, impressive it spread to bug companies like that. But honestly doesn't surprised their security isn't better.

[Oni]

Wonder how much Monero they managed to mine...