For several years, cybercriminals have been using the method of “cryptocurrency mining” to make a profit. They mainly used malware or potentially unwanted applications installed on the victim’s device. Currently, ESET have analyzed a specific case , mining of cryptocurrencywhich is executed directly in the browser via a JavaScript.
Knowing that the default settings of most browsers have JavaScript enabled , cybercriminals simply inserted the mining script into high - traffic websites.
"When targeting a large number of victims, it is easier to reach them by infecting websites rather than directly their devices. In this case, cybercriminals introduced the script on high-traffic websites, mainly affecting users in Russia, Ukraine, Belarus, Moldova and Kazakhstan ," explains Matthieu Faou , Malware Researcher at ESET .
In order to mine Feathercoin, Litecoin and Monero, cybercriminals have injected malicious JavaScript into websites that users visit to stream videos and play online games. On these websites, users stay on the same page for longer, which gives the script to run longer and use more system power.
“This mining is less efficient, as it is 1.5 to 2 times slower compared to mining with regular software, but it is compensated by the larger number of users it affects,” adds Faou.
Some regulators consider mining cryptocurrencies on a user's device without their consent to be as serious as gaining access to their computer. Thus, developers of such services should clearly state this before starting the mining process , which is obviously not the case in a scheme that uses malvertising methods.
Matthieu Faou gives some tips for protecting users against this threat :
· Enable the detection mode for " Potentially Unsafe Applications and Potentially Unwanted Applications ( PUA )" in your ESET Internet Security / ESET NOD 32 Antivirus / ESET Smart Security Premium solutions . Follow the instructions to install it yourself here .
· Keep your online security solution up to date. Here you can check if you have the latest updates for ESET for Windows for home users.
· Install an ad blocker application in the browser (s) you use, such as uBlock .
· Additionally, you can install a script blocker such as NoScript. Please note that installing a script blocker in your browser may disable certain features on some websites.
For more union web mining: in details there is profit on cryptocurrency web mining , visit the article Cryptocurrency on WeLiveSecurity.com .
