Cryptojacking

Part of a series on
Information security
Related security categories
Computer security Automotive security Cybercrime Cybersex trafficking Computer fraud Cybergeddon Cyberterrorism Cyberwarfare Electronic warfare Information warfare Internet security Mobile security Network security Copy protection Digital rights management
Threats
Adware Advanced persistent threat Arbitrary code execution Backdoors Hardware backdoors Code injection Crimeware Cross-site scripting Cryptojacking malware Botnets Data breach Drive-by download browser helper objects Computer crime Viruses Data scraping Denial of service Eavesdropping Email fraud Email spoofing Exploits Keyloggers Logic bombs Time bombs Fork bombs Zip bombs Fraudulent dialers Malware Payload Phishing Polymorphic engine Privilege escalation Ransomware Rootkits Bootkits Scareware Shellcode Spamming Social engineering (security) Screen scraping Spyware Software bugs Trojan horses Hardware Trojans Remote access trojans Vulnerability Web shells Wiper Worms SQL injection Rogue security software Zombie
Defenses
Application security Secure coding Secure by default Secure by design Misuse case Computer access control Authentication Multi-factor authentication Authorization Computer security software Antivirus software Security-focused operating system Data-centric security Code obfuscation Data masking Encryption Firewall Intrusion detection system Host-based intrusion detection system (HIDS) Anomaly detection Security information and event management (SIEM) Mobile secure gateway Runtime application self-protection
v t

Cryptojacking is the act of hijacking a computer to mine cryptocurrencies against the users will, through websites,^[1][2] or while the user is unaware.^[3] One notable piece of software used for cryptojacking was Coinhive, which was used in over two-thirds of cryptojacks before its March 2019 shutdown.^[4] The cryptocurrencies mined the most often are privacy coins--coins with hidden transaction histories--such as Monero and Zcash.^[2][5]

Cryptojacking malware[]

Cryptojacking malware is malware that infects computers to use them to mine cryptocurrencies usually without users knowledge.^[6][7][8] Cryptojacking (also called malicious cryptocurrency mining) is an emerging Internet threat that hides itself on a computer or mobile device, and uses the machine's resources to "mine" various forms of digital currencies known as cryptocurrencies. It is a burgeoning threat that can take over web browsers, as well as compromise all types of devices, from desktops and laptops to smartphones and even network servers.

Like most malicious attacks on the computing public, the motive is profit, but unlike other threats, it is designed to remain completely hidden from the user. To understand the mechanics of the threat and how to protect yourself against it, let's start with some background information. Cryptojacking malware can lead to slowdowns and crashes due to straining of computational resources.^[9]

Notable Events[]

Microsoft Exchange Server[]

In 2021, multiple Zero-day vulnerabilities were found on Microsoft Exchange Servers, allowing remote code execution.^[10]

References[]