Cryptojacking

Unauthorized Cryptocurrency Mining

Cryptojacking is the unauthorized use of someone else's computing resources to mine cryptocurrency. Attackers secretly install mining software or scripts on victims' devices to generate digital currency for themselves.

Risk: medium
Common

Cryptojacking is the unauthorized use of someone else's computing resources to mine cryptocurrency. Attackers secretly install mining software or scripts on victims' devices to generate digital currency for themselves.

How It Works

1

Attackers distribute malicious software through phishing emails, infected websites, or malicious downloads.

2

The malware installs cryptocurrency mining software that runs in the background.

3

The mining software uses the victim's CPU and GPU resources to solve complex mathematical problems.

4

Generated cryptocurrency is sent directly to the attacker's digital wallet.

5

The mining process continues silently, often going undetected for extended periods.

Impact & Risks

Significant slowdown in device performance and responsiveness
Increased electricity bills due to higher power consumption
Premature hardware wear and potential system damage from overheating
Reduced battery life on mobile devices and laptops
Network bandwidth consumption affecting internet speed
Potential system instability and crashes

Types of Cryptojacking

Browser-based Cryptojacking

JavaScript code embedded in websites that mines cryptocurrency while users browse.

Malware-based Cryptojacking

Dedicated mining software installed on victim's devices through malicious programs.

Cloud Cryptojacking

Attackers compromise cloud computing resources to mine cryptocurrency at scale.

Mobile Cryptojacking

Mining apps disguised as legitimate applications on mobile devices.

Real-World Examples

Coinhive Browser Mining (2017-2019)

Popular JavaScript mining service that was widely abused by websites to mine cryptocurrency from visitors' browsers.

WannaMine Cryptojacking (2018)

Malware that spread through networks using EternalBlue exploit to install Monero mining software.

Tesla Cloud Cryptojacking (2018)

Hackers compromised Tesla's cloud infrastructure to mine cryptocurrency using the company's computing resources.