The Los Angeles Times Website Is Unintentionally Serving a Cryptocurrency Mining Script (itwire.com)

troublemaker_23 shares a report from iTWire: The Los Angeles Times website is serving a cryptocurrency mining script which appears to have been placed there by malicious attackers, according to a well-known security expert. British infosec researcher Kevin Beaumont, who has warned that Amazon AWS servers could be held to ransom due to lax security, tweeted that the newspaper's site was serving a script created by Coinhive. The Coinhive script mines for the monero cryptocurrency. The S3 bucket used by the LA Times is apparently world-writable and an ethical hacker appears to have left a warning in the repository, warning of possible misuse and asking the owner to secure the bucket.

Comments

Re:lawsuit

[greenwow]

They are an ultra-liberal paper so the general population should be required to donate to them, so just no. We need to be forced to donate to them.