{"id":32301,"date":"2018-02-20T14:20:11","date_gmt":"2018-02-20T22:20:11","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=32301"},"modified":"2020-04-09T18:43:26","modified_gmt":"2020-04-09T17:43:26","slug":"glimpse-lucrative-world-cryptojacking","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/glimpse-lucrative-world-cryptojacking\/","title":{"rendered":"A Glimpse Into the Lucrative World of Cryptojacking"},"content":{"rendered":"

Many scams have already entered the world of cryptocurrency. But one has never been as silent as “cryptojacking,” which is the act of secretly mining cryptocurrencies by using another computer's CPU.<\/p>\n

\"\"Cryptojackng isn't a new thing; it began its\u00a0popularity in September of 2017, debuting on ThePirateBay's website.\u00a0The first big news had to do with the now-infamous company Coinhive<\/a>, which uses CPU power to mine Monero<\/a>.<\/p>\n

The company, while coming off as legitimate and with good intentions, the idea was for websites to provide an alternative way to generate revenue. Every time a page loads from the site, the Coinhive\u00a0Javascript also loads and uses extra computing power to mine the coin.<\/p>\n

ThePirateBay<\/a> first toyed with this as a way to raise funds for its website back in September. When users got upset about how much CPU it was using to load pages, they took it down, but then brought it back in October with a throttle on the CPU usage of the miner.<\/p>\n

\"\"
CoinHive script in ThePirateBay's code.<\/figcaption><\/figure>\n

For ThePirateBay, it was a genuine way to bring revenue to the company and get rid of advertisements. In a memo they stated,<\/p>\n

\u201cAs you may have noticed we are testing a Monero javascript miner. This is only a test. We really want to get rid of all the ads. But we also need enough money to keep the site running.\u201d<\/p><\/blockquote>\n

But once torrenters\u00a0got a hold of the concept, it began to run rampant. One of the first cryptojacks ran on\u00a0\u00a0Showtime's<\/a> website.<\/p>\n

The problem about the CoinHive cryptojacking is that it doesn't need to be run on each victim's computer\u2014only on the website which they are browsing. If the cryptojacker can infect the target website, any user who browses on that website will be giving their CPU power to the cryptojacker whenever a page is loading.<\/p>\n

Because of this, it has become extremely popular to use the CoinHive\u00a0script. AdGuard<\/a> found that in November\u00a0of 2017, 95% of the 33,000+ cryptojacking malware\u00a0scripts were CoinHive.<\/p>\n

\"\"
Taken from AdGuard<\/figcaption><\/figure>\n

This should also not rule out that the website owners themselves don't hide the script; as seen in the script used by ThePirateBay, a wallet address is put into the script and all mined Monero will go there. Whoever's wallet it is will be the culprit. But AdGuard noted that in November just 3 cryptojackers\u00a0covered ~8,500 websites.<\/p>\n

Is your Website Cryptojacked?<\/h2>\n

It's possible, a great guide by BadPackets<\/a> has been written on how to locate the script in your code, particularly for WordPress sites.<\/p>\n

\"\"
A catch of the script on this WordPress site. Found by Troy of BadPackets<\/figcaption><\/figure>\n

Other Scripts<\/h2>\n

While CoinHive is the most common, other scripts do exist. Among the most popular, according to Adguard<\/a>, are as follows:<\/p>\n