Over 4,200 websites were infected last weekend with a tool that quietly used the computers of people visiting the sites to mine for the Monero cryptocurrency. Unknown attackers installed the mining software by compromising a third-party browser plug-in called Browsealoud that many websites use to provide speech navigation capabilities for people who need additional support. Many of the impacted sites belonged to organizations in the UK and included those of major government organizations such as the Information Commissioner’s Office, National Health Service, General Medical Council, and Student Loan Company.”]

