--- title: "Cryptojacking: a prank signaling more serious problems — ZEBR.ai" description: "One of the fastest-growing malware threats has affected a massive number of companies over the past eighteen months, and most of them do not even know about it. We are talking about a threat called cryptojacking, whose popularity is primarily due to the dramatic increase in the price of Bitcoin and other cryptocurrencies at the end of the year…" url: "https://zebr.ai/en/blog/cryptojacking-a-prank-signaling-more-serious-problems" markdown_url: "https://zebr.ai/en/blog/cryptojacking-a-prank-signaling-more-serious-problems.md" language: "en" published: "2018-12-21T11:09:58+00:00" alternates: cs: "https://zebr.ai/cs/blog/cryptojacking-taskarice-znacici-zavaznejsi-problemy.md" sl: "https://zebr.ai/sl/blog/cryptojacking-vragolije-ki-nakazujejo-resnejse-tezave.md" sk: "https://zebr.ai/sk/blog/cryptojacking-zartiky-naznacujuce-vaznejsie-problemy.md" hr: "https://zebr.ai/hr/blog/kriptojacking-bezazlena-stvar-koja-ukazuje-na-ozbiljnije-probleme.md" sr-Latn: "https://zebr.ai/sr-latn/blog/cryptojacking-sala-koja-ukazuje-na-ozbiljnije-probleme.md" bs: "https://zebr.ai/bs/blog/cryptojacking-sala-koja-ukazuje-na-ozbiljnije-probleme.md" sq: "https://zebr.ai/sq/blog/cryptojacking-nje-shaka-qe-sinjalizon-probleme-me-serioze.md" fr: "https://zebr.ai/fr/blog/cryptojacking-une-plaisanterie-qui-revele-des-problemes-plus-graves.md" es: "https://zebr.ai/es/blog/cryptojacking-una-travesura-que-indica-problemas-mas-graves.md" de: "https://zebr.ai/de/blog/cryptojacking-ein-streich-der-auf-ernstere-probleme-hindeutet.md" pt-BR: "https://zebr.ai/pt-br/blog/cryptojacking-travessura-que-indica-problemas-mais-serios.md" pl: "https://zebr.ai/pl/blog/cryptojacking-psoty-zwiastujace-powazniejsze-problemy.md" it: "https://zebr.ai/it/blog/cryptojacking-una-sciocchezza-che-segnala-problemi-piu-gravi.md" nl: "https://zebr.ai/nl/blog/cryptojacking-schijnbaar-onschuldige-streken-die-op-ernstigere-problemen-wijzen.md" hu: "https://zebr.ai/hu/blog/cryptojacking-csiny-amelyek-sulyosabb-problemakra-utalnak.md" ro: "https://zebr.ai/ro/blog/cryptojacking-o-farsa-care-semnaleaza-probleme-mai-grave.md" tr: "https://zebr.ai/tr/blog/cryptojacking-daha-ciddi-sorunlara-isaret-eden-bir-saka.md" id: "https://zebr.ai/id/blog/cryptojacking-kelucuan-yang-menandakan-masalah-lebih-serius.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) Cryptojacking: a prank signaling more serious problems # Cryptojacking: a prank signaling more serious problems One of the fastest-growing malware threats has affected a massive number of companies over the past eighteen months, and most of them do not even know about it. We are talking about a threat called cryptojacking, whose popularity is primarily due to the dramatic increase in the price of Bitcoin and other cryptocurrencies at the end of the year… 21/12/2018 · 6 min read · ZEBR.ai editorial team One of the fastest-growing malware threats has affected a massive number of companies over the past eighteen months, and most of them do not even know about it. We are talking about a threat called [cryptojacking](https://www.acronis.com/en-us/articles/cryptojacking/), whose popularity is primarily due to the dramatic increase in the price of Bitcoin and other cryptocurrencies at the end of 2017. Most cryptojacking victims are unaware that their own system is infected because its activity is not disruptive to users – the malware merely steals the computing power of your CPU processor and the electricity consumed by it. [TRY OR BUY ACRONIS TRUE IMAGE 2019 CYBER PROTECTION](https://www.zebra.cz/produkt/true-image-2019/) ## The basics of cryptocurrency mining To understand how cryptojacking works, there is no need for much explanation; it is enough to introduce the basics of cryptocurrency mining. Mining most cryptocurrencies involves many volunteers from around the world attempting to solve a specific computationally intensive mathematical problem in exchange for a reward for the fastest among them. The result is recorded in a shared transaction database, meaning it is distributed to all participants, and the “mini-game” starts again. With Bitcoin, each of these mini-games takes 10 minutes on average. Public verifiability of validity and the mutual continuity of results ensure automated verification of transactions performed in the system, so there is no longer any need for further validation of their legitimacy by an authoritative institution such as a bank. The entire process is called Proof-of-Work (PoW), and it is an effective solution to the double-spend problem inherent in all digital currencies, as well as one of the most valuable contributions of blockchain technology. Today, mining most cryptocurrencies, including Bitcoin, uses hardware optimized for this purpose, capable of solving the given problem many times faster than ordinary computer processors while being unsuitable for almost anything else. These are called ASIC chips, or application-specific integrated circuits. However, there are also many cryptocurrencies that require the calculation of mathematical problems designed to be resistant to known types of ASIC chips and to be more efficiently calculated by commonly available GPUs, or graphics cards (and marginally CPUs). The reason for this is the broad global availability of GPUs compared with ASIC chips, whose production is still controlled by only a very small, predominantly Chinese group of companies, with delivery times lasting months. Developers are therefore trying to make the mining process (transaction verification) accessible to as many interested parties as possible and reduce the likelihood that more than 51% of the network's power will be controlled by a small number of powerful players, who could then exploit the aforementioned double-spend issue by returning already spent money to their wallets, thereby, apart from de facto theft, discrediting the usability of the attacked cryptocurrency. These 51% attacks on smaller PoW cryptocurrencies are becoming increasingly common. ## Coinhive, or alternative monetization of web content? An unintended consequence of optimizing mining for ordinary GPU and CPU processors is the phenomenon of cryptojacking. Clever developers came up with a way to divide the mathematical task whose solution is the essence of mining into many small parts and assign them for calculation to thousands of CPU processors on users’ computers through Windows or Linux applications, or via JavaScript code running in a user’s browser and launched by the page being viewed. The best-known and most widespread implementation of cryptocurrency mining through web browsers became the [Coinhive](https://coinhive.com/) application, which focuses on mining a cryptocurrency called Monero. However, not everywhere you encounter Coinhive code or a similar service is something improper happening – using the application on websites can also be a completely transparent and legitimate, albeit marginal, way to monetize content. For example, the popular US magazine Salon.com tried it. In addition to ad-free browsing with a subscription and free browsing with ads, it offered a third option: ad-free browsing in exchange for temporarily mining with your own computer. The well-known pirate portal thepiratebay.org also uses the Coinhive script. The reality is that even sites with a daily traffic of one hundred thousand earn only a few crowns through Coinhive and similar services. Salon.com also ended its cryptocurrency-mining monetization. Building and managing botnets with infected websites and users’ computers is not particularly lucrative either. This is partly due to the 90% decline in the value of the vast majority of cryptocurrencies since last year, but above all to the relative unsuitability of user CPUs for cryptocurrency mining compared not only to ASIC chips but also to GPU cards. However, GPUs cannot be activated through JavaScript, and thus not through a web browser, so they cannot yet be abused for cryptojacking. Simply put, browser-based mining offers very little reward for a high cost. While this discourages most parties interested in legitimate use, as well as some hackers, there are still enough websites and users’ computers infected with a modified Coinhive script that mine selflessly for hackers using other people’s machines and stolen electricity, even if only in small amounts. Hackers gain access to your system using proven infiltration techniques such as phishing and man-in-the-middle attacks. More sophisticated variants of cryptojacking malware are set to run only when the user is inactive or to steal no more than 20% of CPU capacity, making them harder to detect. Most users will likely blame slight slowdowns or temporary processor load on the latest OS update, too many browser windows open, or aging hardware. ## A hidden threat It is therefore difficult to detect, and it will probably have almost no effect on the quality of your interaction with your computer – so why are we talking about cryptojacking malware at all? Because it usually brings more malicious relatives into infected systems, such as [ransomware](https://www.zebra.cz/produkt/acronis-ransomware-protection/). On infected websites and in links in phishing emails, both types of malware often wait together with a piece of code that first checks the state of your machine’s other security measures and then determines which malware will be more advantageous to launch. However, the fact that ransomware and cryptojacking malware use the same attack vector also brings good news: you can protect yourself against both in virtually the same way: - Educate users about the most common malware attack vectors - Change the default browser settings and prevent websites from running JavaScript - Install endpoint AV software that can handle the most common threats, and keep it up to date - Deploy AI-based cyber protection such as Acronis Active Protection, which immediately recognizes and stops ransomware and [cryptojacking attacks](https://www.acronis.com/en-us/personal/true-image-features/cryptomining-blocker/) – including attacks using zero-day exploits, against which traditional antivirus software is defenseless – before they can take root in your system. ## In conclusion Cryptojacking itself is therefore not something you should be overly concerned about. However, the prevalence of this phenomenon clearly points to the fact that there are still many end users and companies that do not use basic security measures or modern, effective solutions such as Acronis Active Protection. Do not let your Christmas be spoiled and try one of our products that include Acronis Active Protection, or at least download the standalone [Acronis Ransomware Protection](https://www.zebra.cz/produkt/acronis-ransomware-protection/) application for free. [MORE ABOUT FREE ACRONIS RANSOMWARE PROTECTION](https://www.zebra.cz/produkt/acronis-ransomware-protection/) Source: Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: