Sucuri Security

Websites are being found infected by crypto mining code which steals the resources of visiting computers for the Monero cryptocurrency.

Laptop’s fan ran at full blast

This is because the website they were viewing is tied up with the complex number-crunching necessary to earn the digital currency.

The website’s front-end was hacked for cryptocurrencies.

The back-end was secretly hosting a keylogger designed to steal unsuspecting users’ login credentials.

The forms is sent to the hackers even before the user has clicked on the log in button.

Source: https://www.bitdefender.com/blog/hotforsecurity/keylogger-found-on-thousands-of-wordpress-based-sites-stealing-every-keypress-as-you-type

TPRM report: https://scoringcyber.rankiteo.com/company/sucuri-security

"id": "suc22193622",
"linkid": "sucuri-security",
"type": "Malware",
"date": "01/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'type': 'Website'}],
 'attack_vector': ['Website Front-End', 'Website Back-End'],
 'data_breach': {'type_of_data_compromised': ['Login Credentials']},
 'description': 'Websites are being found infected by crypto mining code which '
                'steals the resources of visiting computers for the Monero '
                'cryptocurrency. The website’s front-end was hacked for '
                'cryptocurrencies, and the back-end was secretly hosting a '
                'keylogger designed to steal unsuspecting users’ login '
                'credentials.',
 'impact': {'data_compromised': ['Login Credentials'],
            'systems_affected': ['Visiting Computers',
                                 'Website Front-End',
                                 'Website Back-End']},
 'initial_access_broker': {'entry_point': ['Website Front-End',
                                           'Website Back-End']},
 'motivation': 'Financial Gain',
 'title': 'Website Infected by Crypto Mining Code and Keylogger',
 'type': 'Cryptojacking and Keylogging'}