home.social

#cryptojacking — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cryptojacking, aggregated by home.social.

fetched live
  1. Fake CCleaner installs GhostDesk Chrome spyware

    A fraudulent version of the widely-used PC cleaning utility CCleaner is being distributed through a convincing imitation website to deploy GhostDesk, a malicious Chrome extension functioning as spyware. The attack begins when users download the fake application from a lookalike site, which then launches a multi-stage infection using CScript to modify Chrome's Security Extension and install malicious components. Once active, GhostDesk performs extensive surveillance including credential theft, keylogging, screenshot capture, cookie harvesting, and cryptojacking. The extension establishes command-and-control communications via WebSocket connections and can execute arbitrary code within browser tabs. Similar fake versions of other popular software like 7-Zip and Adobe Acrobat have been identified using identical infection techniques.

    Pulse ID: 6a7b8dab529ad28b12d29796
    Pulse Link: otx.alienvault.com/pulse/6a7b8
    Pulse Author: AlienVault
    Created: 2026-08-11 21:01:31

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Adobe #Browser #CCleaner #Chrome #ChromeExtension #CryptoJacking #CyberSecurity #InfoSec #OTX #OpenThreatExchange #SpyWare #ZIP #bot #AlienVault

  2. Fake CCleaner installs GhostDesk Chrome spyware

    A fraudulent version of the widely-used PC cleaning utility CCleaner is being distributed through a convincing imitation website to deploy GhostDesk, a malicious Chrome extension functioning as spyware. The attack begins when users download the fake application from a lookalike site, which then launches a multi-stage infection using CScript to modify Chrome's Security Extension and install malicious components. Once active, GhostDesk performs extensive surveillance including credential theft, keylogging, screenshot capture, cookie harvesting, and cryptojacking. The extension establishes command-and-control communications via WebSocket connections and can execute arbitrary code within browser tabs. Similar fake versions of other popular software like 7-Zip and Adobe Acrobat have been identified using identical infection techniques.

    Pulse ID: 6a7b8dab529ad28b12d29796
    Pulse Link: otx.alienvault.com/pulse/6a7b8
    Pulse Author: AlienVault
    Created: 2026-08-11 21:01:31

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #Adobe #Browser #CCleaner #Chrome #ChromeExtension #CryptoJacking #CyberSecurity #InfoSec #OTX #OpenThreatExchange #SpyWare #ZIP #bot #AlienVault

  3. TeamPCP Traced Back to 2020 Cryptojacking Operation

    Indicators extracted from public reporting. Source: infosecurity-magazine.com/news

    Pulse ID: 6a79a084ffa341e0e666f555
    Pulse Link: otx.alienvault.com/pulse/6a79a
    Pulse Author: CyberHunter_NL
    Created: 2026-08-10 09:57:24

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #CryptoJacking #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

  4. TeamPCP Traced Back to 2020 Cryptojacking Operation

    Indicators extracted from public reporting. Source: infosecurity-magazine.com/news

    Pulse ID: 6a79a084ffa341e0e666f555
    Pulse Link: otx.alienvault.com/pulse/6a79a
    Pulse Author: CyberHunter_NL
    Created: 2026-08-10 09:57:24

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #CryptoJacking #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

  5. POV: Euer Rechner entwickelt sich plötzlich zum #Hustler 💻

    Euer Laptop arbeitet mehr als sonst? Dann könnte #Cryptojacking dahinterstecken.

    Dabei nutzen Cyberkriminelle fremde Geräte, um Kryptowährungen zu schürfen. Das kann aber Leistung und Sicherheit eurer Rechner beeinträchtigen.

    Solltet ihr das bei euch feststellen, dann:

    ➡️ Gerät vom Netzwerk trennen
    ➡️ Virenscan starten
    ➡️ verdächtige Programme entfernen
    ➡️ Passwörter ändern

    #BSI #Cybernation

  6. POV: Euer Rechner entwickelt sich plötzlich zum #Hustler 💻

    Euer Laptop arbeitet mehr als sonst? Dann könnte #Cryptojacking dahinterstecken.

    Dabei nutzen Cyberkriminelle fremde Geräte, um Kryptowährungen zu schürfen. Das kann aber Leistung und Sicherheit eurer Rechner beeinträchtigen.

    Solltet ihr das bei euch feststellen, dann:

    ➡️ Gerät vom Netzwerk trennen
    ➡️ Virenscan starten
    ➡️ verdächtige Programme entfernen
    ➡️ Passwörter ändern

    #BSI #Cybernation

  7. How to Stay Protected

    XMRig Malware Campaigns Target Businesses

    Cybersecurity threats continue to evolve, and one of the most persistent threats facing businesses today involves cybercriminals abusing the popular XMRig mining software. While XMRig is a legitimate, open-source cryptocurrency miner used by many enthusiasts to mine Monero (XMR), attackers frequently modify or secretly install it on corporate computers to generate profits without the owner’s knowledge.

    In this article, we’ll explain how XMRig is being misused in corporate environments, the risks to businesses, how these attacks work, and the best practices to prevent them.

    What Is XMRig?

    XMRig is a free and open-source CPU and GPU miner designed primarily for mining Monero (XMR). It is widely respected within the cryptocurrency community because it is efficient, actively maintained, and available for Windows, Linux, and macOS.

    By itself, XMRig is not malware. However, cybercriminals often bundle modified versions of XMRig with malicious software or deploy it after compromising a computer.

    Why Are Businesses Being Targeted?

    Corporate environments provide an attractive opportunity for attackers because they often contain:

    • High-performance desktop computers
    • Powerful servers
    • Multiple workstations
    • Cloud infrastructure
    • Continuous internet connectivity

    Instead of mining cryptocurrency on their own hardware, attackers infect company devices and secretly use the organisation’s computing power.

    The result is free cryptocurrency mining at the company’s expense.

    How XMRig Malware Gets Installed

    Most unauthorised XMRig installations begin after another security weakness has already been exploited.

    Common infection methods include:

    • Phishing emails containing malicious attachments
    • Fake software downloads
    • Exploitation of unpatched vulnerabilities
    • Weak Remote Desktop Protocol (RDP) passwords
    • Stolen administrator credentials
    • Trojan malware that downloads additional payloads

    Once attackers gain access, they silently install XMRig and configure it to connect to their own mining pools.

    Warning Signs of an XMRig Infection

    Many organisations discover mining malware only after performance problems become noticeable.

    Common symptoms include:

    • Constantly high CPU usage
    • Increased electricity consumption
    • Slow computers
    • Loud cooling fans
    • Servers running hotter than normal
    • Unknown scheduled tasks
    • Unexpected outbound network traffic
    • Security software being disabled

    Some attackers even configure XMRig to stop mining whenever a user opens Task Manager, making detection more difficult.

    Business Impact

    Although cryptojacking usually does not encrypt files like ransomware, it can still cause significant operational issues.

    Potential consequences include:

    Reduced Productivity

    Employees experience slower computers, affecting daily work.

    Higher Operating Costs

    Mining consumes CPU resources and electricity around the clock.

    Hardware Wear

    Continuous high CPU usage can shorten the lifespan of processors, cooling systems, and power supplies.

    Security Risks

    An XMRig infection often indicates that attackers already have unauthorised access to the network, meaning sensitive business data may also be at risk.

    How Organisations Can Protect Themselves

    Preventing cryptojacking requires multiple layers of security.

    Keep Systems Updated

    Install security updates for Windows, Linux, browsers, and all business software as soon as practical.

    Use Endpoint Protection

    Modern antivirus and endpoint detection solutions can identify suspicious mining behaviour before it becomes widespread.

    Enable Multi-Factor Authentication

    Protect administrator accounts and remote access services with MFA wherever possible.

    Monitor CPU Usage

    Investigate unexplained spikes in processor utilisation, especially outside business hours.

    Restrict Administrative Privileges

    Limit local administrator permissions to reduce the impact of compromised accounts.

    Educate Employees

    Regular cybersecurity awareness training helps staff recognise phishing emails and other social engineering attacks.

    Is XMRig Dangerous?

    The software itself is completely legitimate.

    The danger comes from unauthorised installation and misuse by attackers.

    Many security vendors detect unauthorised XMRig deployments because they are commonly associated with cryptojacking campaigns rather than because the software itself is malicious.

    Best Practices for IT Teams

    Organisations should adopt a proactive security strategy by:

    • Regularly auditing endpoints
    • Monitoring unusual network connections
    • Reviewing scheduled tasks and startup entries
    • Enforcing least-privilege access
    • Conducting vulnerability scans
    • Backing up critical business data
    • Implementing continuous security monitoring

    Early detection significantly reduces the financial and operational impact of mining malware.

    Final Thoughts

    Cryptocurrency mining software like XMRig serves legitimate purposes for individuals and organisations that choose to mine digital assets. However, when cybercriminals secretly deploy XMRig on corporate systems, it becomes part of a cryptojacking attack that wastes resources, increases costs, and may signal a broader security compromise.

    Businesses should combine strong cybersecurity practices, employee awareness, regular patching, and continuous monitoring to minimise the risk of unauthorised mining software running within their networks.

    By understanding how these attacks operate and responding quickly to suspicious activity, organisations can better protect their infrastructure, maintain productivity, and reduce the likelihood of future compromises.

    Frequently Asked Questions

    Is XMRig malware?

    No. XMRig is legitimate open-source cryptocurrency mining software. It only becomes part of malicious activity when attackers install it without permission.

    What cryptocurrency does XMRig mine?

    It is primarily designed to mine Monero (XMR) using the RandomX algorithm.

    Can antivirus detect XMRig?

    Many security products detect unauthorised XMRig installations because they are commonly used in cryptojacking attacks.

    How can I tell if my computer is mining cryptocurrency?

    Persistent high CPU usage, overheating, increased fan noise, slow performance, and unexplained network connections can all indicate possible cryptojacking.

    #Technology #ai #businessSecurity #corporateSecurity #cpuMining #cryptoMalware #cryptocurrencyMining #cryptojacking #cyberSecurity #cyberThreats #cyberSecurity #cybersecurity #dataProtection #endpointSecurity #enterpriseCybersecurity #ITSecurity #LinuxSecurity #malwareDetection #malwareProtection #miningMalware #Monero #MoneroMiner #MoneroMining #networkSecurity #phishingAttacks #RandomX #ransomware #security #securityAwareness #serverSecurity #WindowsSecurity #XMRig #XMRigMalware #XMRigMiner
  8. How to Stay Protected

    XMRig Malware Campaigns Target Businesses

    Cybersecurity threats continue to evolve, and one of the most persistent threats facing businesses today involves cybercriminals abusing the popular XMRig mining software. While XMRig is a legitimate, open-source cryptocurrency miner used by many enthusiasts to mine Monero (XMR), attackers frequently modify or secretly install it on corporate computers to generate profits without the owner’s knowledge.

    In this article, we’ll explain how XMRig is being misused in corporate environments, the risks to businesses, how these attacks work, and the best practices to prevent them.

    What Is XMRig?

    XMRig is a free and open-source CPU and GPU miner designed primarily for mining Monero (XMR). It is widely respected within the cryptocurrency community because it is efficient, actively maintained, and available for Windows, Linux, and macOS.

    By itself, XMRig is not malware. However, cybercriminals often bundle modified versions of XMRig with malicious software or deploy it after compromising a computer.

    Why Are Businesses Being Targeted?

    Corporate environments provide an attractive opportunity for attackers because they often contain:

    • High-performance desktop computers
    • Powerful servers
    • Multiple workstations
    • Cloud infrastructure
    • Continuous internet connectivity

    Instead of mining cryptocurrency on their own hardware, attackers infect company devices and secretly use the organisation’s computing power.

    The result is free cryptocurrency mining at the company’s expense.

    How XMRig Malware Gets Installed

    Most unauthorised XMRig installations begin after another security weakness has already been exploited.

    Common infection methods include:

    • Phishing emails containing malicious attachments
    • Fake software downloads
    • Exploitation of unpatched vulnerabilities
    • Weak Remote Desktop Protocol (RDP) passwords
    • Stolen administrator credentials
    • Trojan malware that downloads additional payloads

    Once attackers gain access, they silently install XMRig and configure it to connect to their own mining pools.

    Warning Signs of an XMRig Infection

    Many organisations discover mining malware only after performance problems become noticeable.

    Common symptoms include:

    • Constantly high CPU usage
    • Increased electricity consumption
    • Slow computers
    • Loud cooling fans
    • Servers running hotter than normal
    • Unknown scheduled tasks
    • Unexpected outbound network traffic
    • Security software being disabled

    Some attackers even configure XMRig to stop mining whenever a user opens Task Manager, making detection more difficult.

    Business Impact

    Although cryptojacking usually does not encrypt files like ransomware, it can still cause significant operational issues.

    Potential consequences include:

    Reduced Productivity

    Employees experience slower computers, affecting daily work.

    Higher Operating Costs

    Mining consumes CPU resources and electricity around the clock.

    Hardware Wear

    Continuous high CPU usage can shorten the lifespan of processors, cooling systems, and power supplies.

    Security Risks

    An XMRig infection often indicates that attackers already have unauthorised access to the network, meaning sensitive business data may also be at risk.

    How Organisations Can Protect Themselves

    Preventing cryptojacking requires multiple layers of security.

    Keep Systems Updated

    Install security updates for Windows, Linux, browsers, and all business software as soon as practical.

    Use Endpoint Protection

    Modern antivirus and endpoint detection solutions can identify suspicious mining behaviour before it becomes widespread.

    Enable Multi-Factor Authentication

    Protect administrator accounts and remote access services with MFA wherever possible.

    Monitor CPU Usage

    Investigate unexplained spikes in processor utilisation, especially outside business hours.

    Restrict Administrative Privileges

    Limit local administrator permissions to reduce the impact of compromised accounts.

    Educate Employees

    Regular cybersecurity awareness training helps staff recognise phishing emails and other social engineering attacks.

    Is XMRig Dangerous?

    The software itself is completely legitimate.

    The danger comes from unauthorised installation and misuse by attackers.

    Many security vendors detect unauthorised XMRig deployments because they are commonly associated with cryptojacking campaigns rather than because the software itself is malicious.

    Best Practices for IT Teams

    Organisations should adopt a proactive security strategy by:

    • Regularly auditing endpoints
    • Monitoring unusual network connections
    • Reviewing scheduled tasks and startup entries
    • Enforcing least-privilege access
    • Conducting vulnerability scans
    • Backing up critical business data
    • Implementing continuous security monitoring

    Early detection significantly reduces the financial and operational impact of mining malware.

    Final Thoughts

    Cryptocurrency mining software like XMRig serves legitimate purposes for individuals and organisations that choose to mine digital assets. However, when cybercriminals secretly deploy XMRig on corporate systems, it becomes part of a cryptojacking attack that wastes resources, increases costs, and may signal a broader security compromise.

    Businesses should combine strong cybersecurity practices, employee awareness, regular patching, and continuous monitoring to minimise the risk of unauthorised mining software running within their networks.

    By understanding how these attacks operate and responding quickly to suspicious activity, organisations can better protect their infrastructure, maintain productivity, and reduce the likelihood of future compromises.

    Frequently Asked Questions

    Is XMRig malware?

    No. XMRig is legitimate open-source cryptocurrency mining software. It only becomes part of malicious activity when attackers install it without permission.

    What cryptocurrency does XMRig mine?

    It is primarily designed to mine Monero (XMR) using the RandomX algorithm.

    Can antivirus detect XMRig?

    Many security products detect unauthorised XMRig installations because they are commonly used in cryptojacking attacks.

    How can I tell if my computer is mining cryptocurrency?

    Persistent high CPU usage, overheating, increased fan noise, slow performance, and unexplained network connections can all indicate possible cryptojacking.

    #Technology #ai #businessSecurity #corporateSecurity #cpuMining #cryptoMalware #cryptocurrencyMining #cryptojacking #cyberSecurity #cyberThreats #cyberSecurity #cybersecurity #dataProtection #endpointSecurity #enterpriseCybersecurity #ITSecurity #LinuxSecurity #malwareDetection #malwareProtection #miningMalware #Monero #MoneroMiner #MoneroMining #networkSecurity #phishingAttacks #RandomX #ransomware #security #securityAwareness #serverSecurity #WindowsSecurity #XMRig #XMRigMalware #XMRigMiner
  9. Microsoft Warns of AI-Driven Cryptojacking Campaign Targeting High-Performance GPUs

    Beware of a sneaky new cryptojacking scam that's using AI chatbots to trick you into downloading malicious software - hackers are now hiding in plain sight, serving up poisoned links in chatbot responses that seem like harmless software recommendations. This cunning tactic is a game-changer for…

    osintsights.com/microsoft-warn

    #AidrivenCryptojacking #Cryptojacking #LlmbasedThreats #SocialEngineering #EmergingThreats

  10. @sirfharu I reported that coinbase (crypto spam) and blocked as well my end. The one in your neighbourhood post.
    When did mastodon start to have these spammers? No place they seem to have spared.
    #banspam #cryptojacking #spam
    @masto.social

  11. Hackers are hijacking corporate #XWiki servers using flaw CVE-2025-24893 to install cryptominers and gain full server access. Patch now. 🔒

    Read: hackread.com/hackers-hijack-xw

    #CyberSecurity #RCE #Cryptojacking #XWiki #InfoSec

  12. Hackers are hijacking corporate #XWiki servers using flaw CVE-2025-24893 to install cryptominers and gain full server access. Patch now. 🔒

    Read: hackread.com/hackers-hijack-xw

    #CyberSecurity #RCE #Cryptojacking #XWiki #InfoSec

  13. Tom’s Hardware: Hacker plants three strains of malware in a Steam Early Access game called Chemia — security company found crypto-jacking infostealers and a backdoor to install yet more malware in the future. “A cyber threat intelligence firm called Prodaft revealed that ‘Chemia,’ a game previously available via Steam’s Early Access program, shipped with three strains of malware.”

    https://rbfirehose.com/2025/07/31/toms-hardware-hacker-plants-three-strains-of-malware-in-a-steam-early-access-game-called-chemia-security-company-found-crypto-jacking-infostealers-and-a-backdoor-to-install-yet-more-malwa/

  14. Tom’s Hardware: Hacker plants three strains of malware in a Steam Early Access game called Chemia — security company found crypto-jacking infostealers and a backdoor to install yet more malware in the future. “A cyber threat intelligence firm called Prodaft revealed that ‘Chemia,’ a game previously available via Steam’s Early Access program, shipped with three strains of malware.”

    https://rbfirehose.com/2025/07/31/toms-hardware-hacker-plants-three-strains-of-malware-in-a-steam-early-access-game-called-chemia-security-company-found-crypto-jacking-infostealers-and-a-backdoor-to-install-yet-more-malwa/

  15. 🚨 RedisRaider alert! 🚨 Researchers spot a Go-based malware targeting public #Redis servers on #Linux, deploying XMRig miners via config abuse. It scans IPv4, injects cron jobs, and spreads fast—plus anti-forensics tricks! Full story 👉 thehackernews.com/2025/05/go-b #Cybersecurity #Malware #Cryptojacking #newz

  16. 🚨 RedisRaider alert! 🚨 Researchers spot a Go-based malware targeting public #Redis servers on #Linux, deploying XMRig miners via config abuse. It scans IPv4, injects cron jobs, and spreads fast—plus anti-forensics tricks! Full story 👉 thehackernews.com/2025/05/go-b #Cybersecurity #Malware #Cryptojacking #newz