Why is Malwarebytes blocking CoinHive?

If you've encountered a Malwarebytes web protection block for coinhive.com over the last few weeks, you are either glad about it, angry about it, or don't really care. Since September 19, the second most frequently blocked website for our customers has been coinhive.com, and when we observe that...

Hundreds Of websites mining cryptocurrency without user consent

By Waqas Previously it was reported that torrent search platform The Pirate This is a post from HackRead.com Read the original post: Hundreds Of websites mining cryptocurrency without user consent...

Hackers are compromising websites to mine cryptocoins via user’s CPU

By Waqas For the last couple of weeks, the trend of inserting This is a post from HackRead.com Read the original post: Hackers are compromising websites to mine cryptocoins via users CPU...

CloudFlare Boots Off Torrent Site For Using Cryptocurrency Miner

By Waqas CloudFlare says sites running mining code without notifying users are considered to This is a post from HackRead.com Read the original post: CloudFlare Boots Off Torrent Site For Using Cryptocurrency Miner...

Hackers Exploiting Microsoft Servers to Mine Monero - Makes $63,000 In 3 Months

Mining cryptocurrencies can be a costly investment as it takes a monstrous amount of computing power, and thus hackers have started using malware that steals computing resources of computers it hijacks to make lots of dollars in digital currency. Security researchers at security firm ESET have...

After The Pirate Bay, Showtime Websites Also Found Mining Cryptocoins

By Uzair Amir It has only been a week since The Pirate Bay This is a post from HackRead.com Read the original post: After The Pirate Bay, Showtime Websites Also Found Mining Cryptocoins...

Drive-by mining and ads: The Wild Wild West

There seems to be a trend lately for publishers to monetize their traffic by having their visitors mine for cryptocurrencies while on their site. The idea is that you are accessing content for free and in exchange, your computer its CPU in particular will be used for mining purposes. The Pirate B...

Multiple Websites Mine Cryptocurrencies CPU Hijacking

A CPU hijacking vulnerability exists in multiple web servers. A remote attacker can exploit this vulnerability using one of the following miners: CoinHive, CryptoLoot, MineMyTraffic, ProjectPoi and JSECoin. Successful exploitation allows a remote attacker to use a clients CPU for currency mining...

Threatpost News Wrap, September 22, 2017

Mike Mimoso and Chris Brook recap the news of the week and look back at the Equifax saga so far. They also discuss a Google HTTPS warnings paper, cryptocurrency mining at the Pirate Bay, and bringing machine learning to passwords. Download: ThreatpostNewsWrapSeptember222017.mp3 Show notes: Equifa...

The Pirate Bay Caught Running Browser-Based Cryptocurrency Miner

The world's popular torrent download website, The Pirate Bay, has again been in a new controversy—this time over secretly planting an in-browser cryptocurrency miner on its website that utilizes its visitors' CPU processing power in order to mine digital currencies. The Pirate Bay is the most...

Pirate Bay Spotted Hosting Monero Cryptocurrency Miner

A cryptocurrency miner surfaced on the world’s largest torrenting site for a day over the weekend, raising the ire of users unaware the tool was there, let alone leveraging their machine’s computing power. Users noticed the miner Friday night on The Pirate Bay, a site that acts as a treasure trov...

The Pirate Bay Caught Running Cryptocurrency Mining Script

By Waqas In 2015, it was reported that uTorrent was secretly installing This is a post from HackRead.com Read the original post: The Pirate Bay Caught Running Cryptocurrency Mining Script...

Satoshi Bomb

Let us discuss what defines the profitability of bitcoin mining, what principles for mining speed adaptation were initially embedded into it, and why these principles can lead to the failure of the cryptocurrency in the long run. We assume that the reader has an idea of basic Bitcoin mechanics su...

IDN Homograph Attack Spreading Betabot Backdoor

An IDN homograph attack leveraging Adobe’s brand has been discovered, with the malicious site spreading the Betabot backdoor and ultimately infecting compromised machines with cryptocurrency-mining and data-stealing malware. Attacks using internationalized domain name homographs rely on users...

africanmining.com XSS vulnerability

Vulnerable URL: http://www.africanmining.com/company.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1324821 VIP website status:| No Coordinated Disclosure Timeline:...

Revamped Nukebot Malware Changes Targets, Adds Functions

A revamped version of the Nukebot banking trojan dubbed Jimmy Nukebot has shifted focus from stealing bankcard data and now acts as a conduit for quietly downloading malicious payloads for web-injects, cryptocurrency mining, and taking screenshots of targeted systems. The code is a modification o...

Jimmy Nukebot: from Neutrino with love

"You FOOL! This isn't even my final form!" In one of our previous articles, we analyzed the NeutrinoPOS banker as an example of a constantly evolving malware family. A week after publication, this Neutrino modification delivered up a new malicious program classified by Kaspersky Lab as...

Hiking Club Malvertisements Drop Monero Miners Via Neptune Exploit Kit

Exploit kit EK activity has been on the decline ever since Angler Exploit Kit was shut down in 2016. Fewer people using Internet Explorer and a drop in browser support for Adobe Flash – two primary targets of many exploit kits – have also contributed to this decline. Additionally, some popular...

Hiking Club Malvertisements Drop Monero Miners Via Neptune Exploit Kit

Exploit kit EK activity has been on the decline ever since Angler Exploit Kit was shut down in 2016. Fewer people using Internet Explorer and a drop in browser support for Adobe Flash – two primary targets of many exploit kits – have also contributed to this decline. Additionally, some popular...

PHP Cloud mining Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Bitcoin,Dogecoin Mining 1.0 - Authentication Bypass Dork: N/A Date: 21.08.2017 Vendor Homepage: https://codecanyon.net/user/bousague Software Link: https://codecanyon.net/item/bitcoindogecoin-mining-php-script/20315581 Demo:...