Sun 11 Feb 2018 20.37 GMT Last modified on Sun 11 Feb 2018 22.00 GMT
Person using laptop
The UK’s data protection website is one of many infected by the malware. Photograph: Dominic Lipinski/PA
Thousands of websites, including those belonging to NHS services, the Student Loans Company and several English councils, have been infected by malware that forces visitors’ computers to mine cryptocurrency while using the site.
Late on Sunday, the website of the UK’s data protection watchdog, the Information Commissioner’s Office, was taken down to deal with the issue after it was reportedly infected by the malware.
The cryptojacking script was inserted into website codes through BrowseAloud, a popular plugin that helps blind and partially-sighted people access the web.
More than 5,000 websites have been flooded by the malware.
Software known as Coinhive, which quietly uses the processing power of a user’s device to mine open source cryptocurrency Monero, appears to have been injected into the compromised BrowseAloud plugin.
Texthelp, which operates BrowseAloud, took its website down on Sunday while it tried to resolve the problem.
Billions of video site visitors unwittingly mine cryptocurrency as they watch
The National Cyber Security Centre confirmed the issue was being investigated, adding there was nothing to suggest members of the public were at risk after the malware attack.
Scott Helme, an IT security consultant, raised the alarm about the malware after he received a message from a friend whose antivirus software had detected an issue after visiting a UK government website.