What is cryptojacking? How to detect mining malware

Cryptojacking is a type of cybercrime that occurs when hackers hijack the processing power of unsuspecting internet users in order to generate new cryptocurrencies.

Rising Bitcoin prices often lead people to get into “mining”–the process of using specialized computer hardware to create units of digital currencies. The energy-intensive nature of mining increases the number of individuals looking to steal computing power. Some of the most private cryptocurrencies–Monero and Zcash–are involved in many cryptojacking cases.

Cryptojacking attackers work surreptitiously. Affected users are usually unaware when crypto mining malware runs complex calculations on their computers, sucking up vast amounts of power. People may notice their computers overheating or working much more slowly. 

But in general, cryptojacking goes undetected much more often than other cybercrimes.

Here’s a guide to how cryptojacking works and what internet users can do to prevent mining malware from infecting their computers.

Related: Guide to taxes and cryptocurrency

Image Credit: depositphotos.com.

How Cryptojacking Works

There are three ways that crypto mining malware can become embedded on a victim’s computer:

Image Credit: Jirapong Manustrong / iStock.

1. Phishing Scam

People fall prey by clicking a link in a phishing e-mail, unintentionally loading crypto mining malware onto their computers.

Image Credit: jpgfactory/istockphoto.

2. Infected Website

Attackers inject a malicious code or “script” onto a website. The script mines new cryptocurrencies on any computers that visit the website.

Image Credit: iStock.

3. Worms

There have also been cases of cryptojacking worms–malware that can replicate itself onto other computers, devices or servers. Such scripts are also more difficult to detect and remove.

Once placed, the malware runs in the background of victims’ computers while the unknowing victim goes about their business on the device. After the crypto mining script solves complex mathematical problems, the results are sent to the hacker, who then pockets them in what is their cryptocurrency wallet.

Some experts say that streaming and gaming websites tend to be popular venues for cryptojacking codes to lurk. Data has found a single crypto mining malware on more than 35,000 websites.

Image Credit: Marc Bruxelle / iStock.

Risks of Cryptojacking

Cryptojacking is popular because the risk of being caught is so much lower than with other forms of cybercrime like ransomware, which requires that victims pay up in order to be successful.

Those impacted by cryptojacking may see their computer systems slow down dramatically and their electricity bills skyrocket. Because that’s how Bitcoin mining works: the costs of computer hardware and electricity are often the biggest drags on the profits of cryptominers.

Meanwhile, even bigger risks exist: once a hacker has infiltrated a victim’s computer, they may be able to jump to other areas of the network and steal data or intellectual property.

Image Credit: ipopba / iStock.

Famous Cryptojacking Incidents

Crypto mining malware has been known to be around since at least 2011, but cryptojacking ramped up in late 2017 as more people started investing in cryptocurrencies. The more valuable a cryptocurrency, the greater the incentive to mine it.

Cryptojacking became so prevalent that in April 2018, Google announced it would stop listing extensions for its Chrome browser that mines cryptocurrency. The internet giant found that 90% of such software on its webstore violated policies.

Several media outlets have reported that a number of companies and organizations have been victims of cryptojacking. In February 2018, security firm Redlock spotted that electric carmaker Tesla’s cloud was infected by cryptojacking malware.

Other cases have included code-collaboration website Github, said security company Avast in March 2018, U.K. insurer Aviva Plc and Britain’s National Health Service, according to an April 2018 article by the Financial Times. Meanwhile, the Harvard Crimson reported back in 2014 that the university’s research network was used for mining Dogecoin.

Coinhive, which made software that allowed websites to use visitor’s computers to mine anonymous cryptocurrencies, shuttered in 2019. While some users were legitimate and upfront to their visitors about using Coinhive, its software was also popular among hackers.

A dramatic decline in Monero prices prompted Coinhive’s closure. However, a July 2020 cyber threat report found that even after Coinhive ceased operations, its software was still found to be working. Meanwhile, some cryptojacking activity had shifted to other mining providers.

Image Credit: iStock.

How to Detect Cryptojacking

Cyber security experts say that it can be difficult to detect cryptojacking because such malware operates differently from other types of malware. That’s why surreptitious mining can go undetected on an internet user’s computer, even if they have anti-virus software installed.

People can try to detect cryptojacking by paying attention to their computer’s performance. Signs of cryptojacking could include the device’s fan making noise, a spike in the computer’s Central Processing Unit (CPU), as well as overheating.

Cyberjacking has been known to be more prevalent on movie-streaming and gaming websites, where the code can mine for an hour or more uninterrupted, while the victim is unaware.

Image Credit: Ivan-balvan / iStock .

Tips to Prevent Crypto Mining Malware

1. Avoid certain websites. Browser extensions can help with avoiding websites that host the crypto mining code.
2. Monitor computer performance and look for signs of overheating. Pay attention to the behavior of the computer’s CPU.
3. Take training on how not to fall prey to phishing attempts. This step is particularly important to corporations looking to prevent employees from clicking on phishing e-mails.
4. Update devices with the latest patches that help prevent attackers from taking advantage of vulnerabilities in computer systems.
5. Frequently change computer and device credentials, making them less likely to see unauthorized access.
6. Lastly, it’s important that investors familiarize themselves with cryptocurrency rules and regulations to keep abreast on the latest trends and practices of hackers.

Image Credit: Velishchuk / iStock.

The Takeaway

Cryptojacking is a relatively new form of cybercrime that has exploded as more people learn what is Bitcoin. Cryptojacking involves embedding malware onto an internet user’s device and stealing computing power in order to mine new digital currencies.

It’s an example of how as more investors buy cryptocurrencies, new forms of criminal activity have also cropped up, as perpetrators gravitate toward the anonymous nature of digital currency transactions. Anyone can be a victim of cryptojacking. Those affected have included everyday individuals, government organizations and mega-corporations.

Internet users can take steps to protect themselves from cryptojacking by being wary of phishing attempts and installing anti-crypto-mining web extensions. They should also monitor for any overheating or decrease in performance by their computer.

Learn more:

• Beginner’s guide to crypto trading bots
• Investment education for beginners

This article originally appeared on SoFi.comand was syndicated by MediaFeed.org.