Related tweet https://twitter.com/fransrosen/status/962709013329670145 https://twitter.com/fransrosen/status/962709013329670145 "Same attack as described here:

Related tweet https://twitter.com/fransrosen/status/962709013329670145 https://twitter.com/fransrosen/status/962709013329670145 "Same attack as described here: https://labs.detectify.com/2017/07/13/a-deep-dive-into-aws-s3-access-controls-taking-full-control-over-your-assets/ https://labs.detectify.com/2017/07/13/a-deep-dive-into-aws-s... … it's scripts hosted in a S3-bucket without proper access controls" Edit. Also see https://scotthelme.co.uk/protect-site-from-cyrptojacking-csp-sri/ https://scotthelme.co.uk/protect-site-from-cyrptojacking-csp...