Malicious attackers breached Web analytics platform Statcounter on 3 November and inserted JavaScript that would target the cryptocurrency exchange gate.io, the security firm ESET says in a detailed blog post.