Thousands of websites relying on the Browsealoud plugin recently fell prey to a hack. Websites use this specific plugin for visually impaired visitors so they can hear content.
Hackers secretly ran a cryptocurrency mining script in the background of visiting PCs.
The plugin’s code was altered to run Coinhive’s controversial JavaScript-based Monero digital currency miner. Because it’s based on JavaScript, administrators can easily insert Coinhive’s miner into a webpage.