NHS, local government, and ICO impacted by cryptojacking attack

National Cyber Security Centre claims public is not at risk after malicious code for generating cryptocurrency added to Browsealoud text-to-speech tool

Scores of public-sector websites were affected by a cyberattack which used malware to generate cryptocurrency.

Yesterday morning, hackers breached a JavaScript file contained within the code of Browsealoud – a product made by UK tech company Texthelp that offers a website plug-in to convert text to audio for visually impaired web users. The attackers “added malicious code to the file to use the browser CPU in an attempt to illegally generate cryptocurrency”, according to Texthelp. 

This additional code, an example of a practice popularly known as cryptojacking, was active for about four hours after the breach occurred at 11.14am, Texhthelp said. More than 4,000 sites were impacted and were, during that time, running so-called cryptomining malware. 

Among those to have named as being affected by the issue are a wide range of UK public-sector organisations, including 45 local authorities, nine NHS trusts, six colleges, and four statutory or regulatory bodies.


Related content


The latter group includes the Information Commissioner’s Office, which at 9.29am on Monday morning said: “The ICO’s website will remain closed as we continue to investigate a problem which is thought to involve an issue with the Browsealoud feature.”

The ICO website now appears to be back up and running.

Texthelp said that, as soon as the breach was detected by the company’s “automated security tests”, Browsealoud was taken offline, which automatically removed it from customers’ websites. It will remain out of action until midday on Tuesday – although Texthelp claimed that “the security breach has already been addressed”.

Martin McKay, chief technology officer at Texthelp, added: “A security review will be conducted by an independent security consultancy.  The investigation is ongoing, and customers will receive a further update when the security investigated has been completed.”

The National Cyber Security Centre is also looking at the incident. 

A spokesperson said: “NCSC technical experts are examining data involving incidents of malware being used to illegally mine cryptocurrency. The affected service has been taken offline, largely mitigating the issue. Government websites continue to operate securely. At this stage, there is nothing to suggest that members of the public are at risk.”

The issue was first flagged up by UK-based security researcher Scott Helme. In a blog post on his website yesterday, Helme provided details of simple changes to code that he believes could successfully block other attempts at such an attack.

“This is not a particularly new attack and we’ve known for a long time that CDNs (content delivery networks) or other hosted assets are a prime target to compromise a single target and then infect potentially many thousands of websites,” he added.

 

Sam Trendall

Learn More →

8 thoughts on “NHS, local government, and ICO impacted by cryptojacking attack

  1. st catharines taxi February 1, 2025 at 5:38 pm

    Enhance your journey with our exceptional St. Catharines cab companies. We specialize in efficient transfers, including airport shuttle St. Catharines, St. Catharines to Toronto Airport taxi, and Pearson Airport to St. Catharines services, ensuring a memorable ride every time.

  2. Short Hairstyles February 1, 2025 at 7:18 pm

    Can I simply say what a aid to find somebody who actually is aware of what theyre talking about on the internet. You definitely know how to convey a problem to mild and make it important. Extra folks have to read this and perceive this side of the story. I cant believe youre no more well-liked since you positively have the gift.

  3. Food February 3, 2025 at 11:47 am

    Hi, Neat post. There’s a problem with your site in internet explorer, would check this?IE still is the market leader and a huge portion of people will miss your magnificent writing due to this problem.

  4. Short Hairstyles February 4, 2025 at 4:15 am

    It is really a great and helpful piece of info. I抦 glad that you shared this helpful info with us. Please keep us informed like this. Thank you for sharing.

  5. Short Hairstyles February 4, 2025 at 7:04 am

    Thanks for your posting. I would also love to opinion that the first thing you will need to do is find out if you really need credit improvement. To do that you need to get your hands on a replica of your credit rating. That should never be difficult, because the government makes it necessary that you are allowed to receive one no cost copy of your real credit report every year. You just have to request that from the right folks. You can either check out the website for the Federal Trade Commission as well as contact one of the main credit agencies directly.

  6. Hairstyles VIP February 5, 2025 at 3:44 am

    I believe that avoiding packaged foods will be the first step in order to lose weight. They may taste very good, but highly processed foods currently have very little nutritional value, making you take in more just to have enough vitality to get over the day. For anyone who is constantly having these foods, switching to grain and other complex carbohydrates will help you have more energy while having less. Thanks alot : ) for your blog post.

  7. Hairstyles VIP February 6, 2025 at 5:14 am

    It is really a nice and useful piece of information. I抦 glad that you shared this helpful info with us. Please keep us up to date like this. Thanks for sharing.

  8. Long Hairstyles February 11, 2025 at 1:29 am

    I’m so in love with this. You did a great job!!

Leave a Reply

Your email address will not be published. Required fields are marked *