The name given to the new technique that secretly uses your machine or computer to mine cryptocurrencies visiting an infected site is Crypt, or Cryptojacking.
With the new technique, cybercriminals take control of a computer and use the processing power of the machine to win cryptocurrencies. In general, there are two types of crypto-hijacking attacks: server-based and browser-based.
In the browser-based model, the attacker inserts a javascript code into the web page, which then starts mining crypto-coins when users access the page. The server-based method runs the mining code directly on an infrastructure server.
According to a McAfee report last June, crypto-hacking has become one of criminals' favorite moves for being simpler, more direct, and less risky than ransomware or data theft.
- How does cryptosequest work?
Criminals have developed sophisticated ways to perform machine crypto-outs on the web. See below, the main pitfalls:
- malicious links contained in fake emails that appear to be from banking or government institutions;
- online advertisements of seemingly harmless advertisements;
- miscellaneous sites that run malicious scripts discreetly, without Internet users noticing.
When accessing one of these links, a script is executed, discretely appropriating the electronic capacity of the machine. Most scripts work while navigation within the site is occurring. However, there are more advanced ones that can even install applications on the user's operating system.
- How to protect against crypto-training?
Currently, the major browsers on the market have their own blocking features. Developers of these browsers triage the most reliable ads, freeing users from viruses and malicious scripts.
Have a good anti-virus installed on your machine and update it frequently. This tool reduces the risk of infections from the most varied malware disseminated in the network.
