https://www.theregister.co.uk/2018/11/06/statcounter_javascript_theft_scheme/

One of the top traffic metrics websites on the internet is apparently being used by criminals to steal Bitcoins from a currency exchange.

Researchers at ESET have found that the JavaScript used by StatCounter's analytics platform has been modified by miscreants so that when embedded into the pages of Gate.io, a cryptocurrency exchange, it can siphon off alt-coins.