--- title: "New cryptojacking blocker delivers great results after just one month — ZEBR.ai" description: "It has been a month since the latest update of Acronis True Image 2019 Cyber Protection, which expanded the application's ability to detect malware in Windows systems with a new category. In addition to ransomware, cyber protection can now also detect and stop cryptojacking malware. And the very first month has brought us…" url: "https://zebr.ai/en/blog/new-cryptojacking-blocker-delivers-great-results-after-just-one-month" markdown_url: "https://zebr.ai/en/blog/new-cryptojacking-blocker-delivers-great-results-after-just-one-month.md" language: "en" published: "2019-01-10T08:30:07+00:00" alternates: cs: "https://zebr.ai/cs/blog/novy-cryptojacking-blocker-ma-uz-po-mesici-skvele-vysledky.md" sl: "https://zebr.ai/sl/blog/novi-blokator-cryptojackinga-ima-ze-po-enem-mesecu-odlicne-rezultate.md" sk: "https://zebr.ai/sk/blog/novy-blokovac-cryptojackingu-ma-uz-po-mesiaci-skvele-vysledky.md" hr: "https://zebr.ai/hr/blog/novi-cryptojacking-blocker-vec-nakon-mjesec-dana-ima-sjajne-rezultate.md" sr-Latn: "https://zebr.ai/sr-latn/blog/novi-cryptojacking-blokator-vec-nakon-mesec-dana-ima-odlicne-rezultate.md" bs: "https://zebr.ai/bs/blog/novi-cryptojacking-blocker-vec-nakon-mjesec-dana-ima-odlicne-rezultate.md" sq: "https://zebr.ai/sq/blog/bllokuesi-i-ri-i-cryptojacking-ka-rezultate-te-shkelqyera-pas-vetem-nje-muaji.md" fr: "https://zebr.ai/fr/blog/le-nouveau-bloqueur-de-cryptojacking-affiche-d-excellents-resultats-apres-seulement-un-mois.md" es: "https://zebr.ai/es/blog/el-nuevo-bloqueador-de-cryptojacking-obtiene-excelentes-resultados-tras-solo-un-mes.md" de: "https://zebr.ai/de/blog/neuer-cryptojacking-blocker-erzielt-bereits-nach-einem-monat-hervorragende-ergebnisse.md" pt-BR: "https://zebr.ai/pt-br/blog/novo-bloqueador-de-cryptojacking-ja-apresenta-otimos-resultados-apos-apenas-um-mes.md" pl: "https://zebr.ai/pl/blog/nowy-bloker-cryptojackingu-ma-swietne-wyniki-juz-po-miesiacu.md" it: "https://zebr.ai/it/blog/il-nuovo-blocco-del-cryptojacking-ottiene-ottimi-risultati-gia-dopo-un-mese.md" nl: "https://zebr.ai/nl/blog/nieuwe-cryptojacking-blocker-behaalt-al-na-een-maand-uitstekende-resultaten.md" hu: "https://zebr.ai/hu/blog/az-uj-cryptojacking-blokkolo-mar-egy-honap-utan-kivalo-eredmenyeket-ert-el.md" ro: "https://zebr.ai/ro/blog/noul-blocator-de-cryptojacking-are-rezultate-excelente-dupa-doar-o-luna.md" tr: "https://zebr.ai/tr/blog/yeni-cryptojacking-engelleyici-yalnizca-bir-ayda-harika-sonuclar-elde-etti.md" id: "https://zebr.ai/id/blog/pemblokir-cryptojacking-baru-sudah-menunjukkan-hasil-luar-biasa-setelah-sebulan.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) New cryptojacking blocker delivers great results after just one month # New cryptojacking blocker delivers great results after just one month It has been a month since the latest update of Acronis True Image 2019 Cyber Protection, which expanded the application's ability to detect malware in Windows systems with a new category. In addition to ransomware, cyber protection can now also detect and stop cryptojacking malware. And the very first month has brought us… 10/01/2019 · 3 min read · ZEBR.ai editorial team It has been a month since the latest update of Acronis True Image 2019 Cyber Protection, which expanded the application's ability to detect malware in Windows systems with a new category. In addition to ransomware, cyber protection can now also detect and stop [cryptojacking](https://zebr.ai/en/blog/cryptojacking-taskarice-znacici-zavaznejsi-problemy) malware. And the very first month has brought us unexpectedly rich telemetry data: we recorded tens of thousands of detections worldwide, resulting in a number of interesting findings that we would like to share. [TRY OR BUY ACRONIS TRUE IMAGE 2019 CYBER PROTECTION](https://www.zebra.cz/produkt/true-image-2019/) ## A surprising number of unique malware strains Among the most interesting findings is undoubtedly the fact that around twenty percent of detected cryptojacking malware attacks on user systems were carried out by previously unseen, or rather previously undetectable, malware strains. Acronis Active Protection uses the same techniques to [detect cryptojacking malware](https://www.acronis.com/en-us/articles/cryptojacking/) as it uses to detect its ransomware relatives – both families use the same attack vectors to penetrate user systems, and moreover, our software does not work with traditional threat definitions based on their behavior, but defines them according to their code using effective [machine learning models](https://zebr.ai/en/blog/jak-umela-inteligence-napomaha-s-ochranou-vasich-dat), which continuously analyze the system, so an attack is usually stopped before it really begins. Traditional antivirus solutions cannot deal with unique malware until their database is updated, which is usually too late. Well-known detected cryptojacking malware included xmr-stak-cpu.exe, Claymore CryptoNote CPU Miner, rhminer, and xmrig Monero miner. Old and newly known malware strains attempting unauthorized mining accounted for a total of 60% of detections, while the remaining 40% consisted of legitimate use of cryptomining code. This category includes all cryptocurrency mining processes [using a web browser](https://www.acronis.com/en-us/articles/how-to-block-cryptomining-scripts-in-your-browser/) for which the user knowingly granted an exception. You can read more about how the cryptocurrency mining process works [here](https://zebr.ai/en/blog/cryptojacking-taskarice-znacici-zavaznejsi-problemy). ## Not even Notepad is safe anymore From the perspective of active research, it was even more interesting to observe what initially appeared to be a series of false positives. Our protection repeatedly identified legitimate Windows processes such as chrome.exe, java.exe, notepad.exe, and most frequently setup.exe, with 93 incidents involving two unique hashes, as cryptojacking malware. Subsequent analysis by our researchers showed that these were cases of earlier, only now detected, user system infections by a Trojan horse that had successfully injected code for unauthorized cryptocurrency mining into legitimate processes. *An example of notepad.exe infected with cryptojacking malware, detected thanks to Acronis Active Protection.* Among the less surprising but still valuable findings was that a number of systems reporting these “false positives” were among the systems with the highest number of reports. In the event of one successful attack, the risk of repeated attempts to attack with the same and other malware strains therefore increases significantly. ## A final thought We will continue researching and analyzing ransomware and cryptojacking malware, as well as publishing our findings. In the meantime, however, we recommend that you do not forget to update your traditional antivirus solutions and that you at least try [Acronis True Image 2019](https://www.zebra.cz/produkt/true-image-2019/), which includes our Acronis Active Protection cyber protection technology, or download its free version as the standalone application [Acronis Ransomware Protection.](https://www.zebra.cz/produkt/acronis-ransomware-protection/) *Based on English-language Acronis sources.* [More about free Acronis Ransomware Protection](https://www.zebra.cz/produkt/acronis-ransomware-protection/) Source: Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) ### [ZEBR.AI: N-able introduces shadow AI identification into its UEM and security solutions](https://zebr.ai/en/blog/zebr-ai-n-able-introduces-shadow-ai-identification-into-its-uem-and-security-solutions) New capabilities provide visibility into the use of AI tools across all endpoints and networks by individual identities, without the need for additional agents or infrastructure 28/09/2026 · 3 min read ### [Acronis: Ransomware can halt production even without attacking PLC systems](https://zebr.ai/en/blog/acronis-ransomware-can-halt-production-even-without-attacking-plc-systems) For manufacturing companies, ransomware is not just a matter of IT security, but a matter of production continuity 23/09/2026 · 3 min read ### [GFI Archiver AI simplifies integration with GFI KerioConnect](https://zebr.ai/en/blog/gfi-archiver-ai-simplifies-integration-with-gfi-kerioconnect) Direct integration of both products makes working with corporate emails easier, improves mail server performance, and enables more effective compliance with regulations 21/09/2026 · 2 min read Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: