TrendMicro published a Blog on their Security and Intelligence section stating that a JavaScript program called CoinHive which mines Monero (a digital currency) using a computer’s processing power, was given access to multiple users by attackers with the help of Google ads or Google’s DoubleClick. CoinHive works in the background of a website, and that’s how it was used to distribute malware.
Read full news article on Hackers News Bulletin