Crypto-jacking - Computerphile

TL;DR

Crypto-jacking is a method of using someone's CPU power to mine cryptocurrency without their knowledge or consent, serving as an alternative to ransomware.

Transcript

I wanted to talk about crypto-jacking, right, which is, I mean the name itself it starts off in a good way Sometimes called drive-by mining also a great name. This is the idea that we can trick someone instead of maybe putting a virus on their machine I mean it might still be a virus, but we can trick them into mining some cryptocurrency for us. An... Read More

Key Insights

• ✊ Crypto-jacking exploits users' CPU power to mine cryptocurrency without their knowledge or consent.
• 😮 Coinhive, a legitimate company, unintentionally facilitated the rise of crypto-jacking by offering a script that was easily abused.
• 🎯 Monero is often targeted by crypto-jackers due to its CPU-friendly mining algorithm.
• 🚗 While browser and antivirus restrictions have reduced the prevalence of crypto-jacking, it remains a threat, especially on mobile devices.
• ✋ Websites with high traffic, including government websites, are desirable targets for crypto-jackers.
• 😀 Mobile apps, particularly free games, can also be used to exploit users' CPU power for mining.
• 😀 Vetting processes for apps may help detect and prevent crypto-jacking, but it can still slip through the cracks.

Questions & Answers

Q: What is crypto-jacking and how does it differ from ransomware?

Crypto-jacking involves using someone's CPU power to mine cryptocurrency, whereas ransomware involves taking control of files and demanding payment for their release. Crypto-jacking is a more subtle and silent method.

Q: How did Coinhive contribute to the rise of crypto-jacking?

Coinhive introduced a script that allowed website owners to mine cryptocurrency using visitors' CPU power instead of displaying ads. However, it was abused by malicious actors who embedded the script without consent.

Q: Why is Monero a popular choice for crypto-jackers?

Monero is favored due to its mining algorithm, which is more suitable for CPU mining. This makes it attractive for malware that targets regular PCs, as well as mobile devices.

Q: How are browsers and antivirus vendors combating crypto-jacking?

Browsers and antivirus software have implemented measures to block crypto-mining scripts. Coinhive itself has introduced an opt-in version to distinguish legitimate usage from abuse.

Summary & Key Takeaways

• Crypto-jacking is a form of cybercrime where attackers trick individuals into unknowingly mining cryptocurrency for them using their CPU power.

• Coinhive, a legitimate company, initially introduced the concept as an alternative to online ads, but it was quickly exploited by malicious actors.

• It is becoming less common due to browser and antivirus restrictions, but clones and other malware are still a threat, especially on mobile devices.