So if this is JavaScript, why wouldn't it work in any OS with Java, not just Windows? And would the F11 key uncover the hidden window?Closing your browser won't stop this JavaScript cryptocurrency miner.
By Liam Tung | November 30, 2017
JavaScript-based in-browser cryptocurrency miners are now borrowing loathed online ad techniques to covertly harvest power from PCs after visiting a site.
Most of the browser-based miners on sites that use the Monero-mining Coinhive service can be stopped simply by closing the browser, which stops them chewing up your CPU.
However, security firm Malwarebytes has discovered a new case where the page will continue mining even after the browser is closed.
The technique relies on a tiny 'pop-under' window, which is sometimes used to load hidden ads. For extra cover, the window is designed to sit behind the Windows taskbar, making it hard to spot.
"The trick is that although the visible browser windows are closed, there is a hidden one that remains opened. This is due to a pop-under which is sized to fit right under the taskbar and hides behind the clock," wrote Malwarebytes researcher Jerome Segura.
In-browser cryptominers have grown in popularity, partly in response to the rise of ad-blockers. Coinhive was proposed as a legitimate alternative to advertising. The Pirate Bay, for example, recently integrated Coinhive in its site for this reason, but annoyed some users by apparently accidentally setting it to use 100 percent of a visitor's CPU. It later dialed it back.
However, JavaScript coin miners are now also being used on compromised sites and sites that continue to serve ads.
Sneaky JavaScript cryptominer hides behind taskbar
Sneaky JavaScript cryptominer hides behind taskbar
Windows: This sneaky cryptominer hides behind taskbar even after you exit browser
- perdido
- Posts: 1528
- Joined: Mon 09 Dec 2013, 16:29
- Location: ¿Altair IV , Just north of Eeyore Junction.?
Re: Sneaky JavaScript cryptominer hides behind taskbar
Some javascript code is platform specific.Flash wrote: So if this is JavaScript, why wouldn't it work in any OS with Java, not just Windows? And would the F11 key uncover the hidden window?
.