{"id":22294,"date":"2018-04-11T13:15:10","date_gmt":"2018-04-11T13:15:10","guid":{"rendered":"http:\/\/ci027cfe65c01126c3"},"modified":"2018-04-11T13:15:10","modified_gmt":"2018-04-11T13:15:10","slug":"computer-users-face-growing-threat-cryptojacking-report","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/culture\/computer-users-face-growing-threat-cryptojacking-report","title":{"rendered":"Computer Users Face Growing Threat from Cryptojacking \u2014 Report"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/computer-users-face-growing-threat-from-cryptojacking-report.jpg\" title=\"\"><\/figure>\n<p>Computer users now have one more thing to worry about: cybercriminals secretly tapping into your CPU or GPU to mine cryptocurrencies. Due to an ability to access your computer via a web browser, \u201ccryptojacking\u201d is on the rise, cautioned a British government agency.<\/p>\n<p>\u201cThe technique of delivering cryptocurrency miners through malware has been used for several years, but it is likely in 2018-19 that one of the main threats will be a newer technique of mining cryptocurrency which exploits visitors to a website,\u201d the U.K.\u2019s <a href=\"https:\/\/www.ncsc.gov.uk\/\" target=\"_blank\" rel=\"noopener\">National Cyber Security Centre<\/a> (NCSC) wrote in its <a href=\"https:\/\/www.ncsc.gov.uk\/home\" target=\"_blank\" rel=\"noopener\">annual report<\/a> on April 10, 2018.<\/p>\n<h3>Some History<\/h3>\n<p>While other types of malware have to find a way to trick you into downloading software, in-browser cryptojacking malware doesn\u2019t require you to install a program. Instead, hackers infect a website or an online ad with JavaScript code that auto-executes once it loads in your browser. The cryptomining code then does its job in the background while you continue using your computer as normal. A lag in performance may be the only clue that a computer has been compromised. <\/p>\n<p>Cryptojacking took off in September 2017 when <a href=\"https:\/\/coinhive.com\/\" target=\"_blank\" rel=\"noopener\">Coinhive<\/a> published a JavaScript miner that could start mining the ASIC-resistant cryptocurrency <a href=\"https:\/\/web.getmonero.org\/\" target=\"_blank\" rel=\"noopener\">Monero<\/a> (XMR) after a webpage loaded. \u201cYour users run the miner directly in their browser and mine XMR for you in turn for an ad-free experience, in-game currency or whatever incentives you can come up with,\u201d Coinhive says on its website. <\/p>\n<p>Shortly after, popular torrent download site Pirate Bay incorporated Coinhive as part of a new monetization scheme that would replace the advertisements that normally keep the site afloat. \u201cWe really want to get rid of all the ads. But we also need enough money to keep the site running,\u201d Pirate Bay said in a <a href=\"https:\/\/thepiratebay.org\/blog\" target=\"_blank\" rel=\"noopener\">blog post<\/a> on September 16, 2017. <\/p>\n<p>During the latter part of 2017, Coinhive clones started popping up left and right. Hackers even found ways to inject the scripts into popular websites like Politifact.com and Showtime unbeknownst to the site owners. Today, the internet is rife with in-browser miners. <\/p>\n<h3>Global Problem<\/h3>\n<p>As pointed out in the NCSC report, in December 2017, Check Point <a href=\"https:\/\/blog.checkpoint.com\/2018\/01\/15\/decembers-wanted-malware-crypto-miners-affect-55-businesses-worldwide\/\" target=\"_blank\" rel=\"noopener\">revealed<\/a> that 55 percent of businesses globally were impacted by cryptominers. \u201cPopular websites are likely to continue to be targets for compromise, serving cryptomining malware to visitors, and software is available that, when run in a webpage, uses the visiting computer&#8217;s spare computer processing power to mine the digital currency Monero,\u201d the NCSC says.<\/p>\n<p>The report also points out that in February 2018, over 4,000 websites worldwide, including many government ones, were affected by the cryptojacking script. The problem was eventually <a href=\"https:\/\/www.forcepoint.com\/blog\/security-labs\/coinhive-cryptocurrency-mining-script-injected-1000s-government-websites\" target=\"_blank\" rel=\"noopener\">traced<\/a> to a website plug-in called <a href=\"https:\/\/www.texthelp.com\/en-gb\/products\/browsealoud\/\" target=\"_blank\" rel=\"noopener\">Browsealoud<\/a>, used to help blind and partially sighted people access the web.<\/p>\n<p>Using an ad blocker or antivirus program with features that block browser mining is the best way to prevent crypto hijacking, the report advised. (There&#8217;s also a Chrome extension called <a href=\"https:\/\/chrome.google.com\/webstore\/detail\/no-coin-block-miners-on-t\/gojamcfopckidlocpkbelmpjcgmbgjcl?hl=en\" target=\"_blank\" rel=\"noopener\">No Coin<\/a> that blocks cryptocurrency miners like Coinhive.)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The National Cyber Security Centre reports that computer users face growing threat from cryptojacking malware.<\/p>\n","protected":false},"author":3488,"featured_media":22295,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[3254,97,474,330],"class_list":{"0":"post-22294","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-culture","8":"tag-cryptojacking","9":"tag-mining","10":"tag-research","11":"tag-security"},"author_data":{"id":3488,"name":"Amy Castor","nicename":"amy-castor","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/12\/amy-castor-promo-image-96x96.jpg"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/computer-users-face-growing-threat-from-cryptojacking-report.jpg","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/22294","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/3488"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=22294"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/22294\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/22295"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=22294"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=22294"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=22294"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}