By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
10alert.com10alert.com10alert.com
  • Threats
    • WordPress ThreatsDanger
    Threats
    A cyber or cybersecurity threat is a malicious act that seeks to damage data, steal data, or disrupt digital life in general. Cyber threats include…
    Show More
    Top News
    Versatile Threats: Dangers for any Device – Kaspersky Daily
    12 months ago
    Kaspersky Internet Security for Android wins independent anti-virus testing
    12 months ago
    DEF CON 23: Tell me who you are and I will tell you your lock screen pattern
    12 months ago
    Latest News
    Beware of scammers! Dangerous apps in the App Store
    2 days ago
    How To Limit Login Attempts on WordPress (+ Should You?)
    3 days ago
    Wordfence Intelligence Weekly WordPress Vulnerability Report (September 18, 2023 to September 24, 2023)
    3 days ago
    Two privilege escalation vulnerability in Simple Membership Plugin
    4 days ago
  • Fix
    Fix
    Troubleshooting guide you need when errors, bugs or technical glitches might ruin your digital experience.
    Show More
    Top News
    Cloudflare Introduces User Friendly CAPTCHA Alternative Called Turnstile
    12 months ago
    Windows 10 build 19044.1947 (KB5016688) outs as preview
    12 months ago
    How to disable WiFi or Ethernet network adapter on Windows 11
    12 months ago
    Latest News
    How automatically delete unused files from my Downloads folder?
    8 months ago
    Now you can speed up any video in your browser
    8 months ago
    How to restore access to a file after EFS or view it on another computer?
    8 months ago
    18 Proven Tips to Speed Up Your WordPress Site and Improve SEO | 2023 Guide
    9 months ago
  • How To
    How ToShow More
    Detecting zero-days before zero-day
    Detecting zero-days before zero-day
    22 hours ago
    See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
    See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
    22 hours ago
    Network performance update: Birthday Week 2023
    Network performance update: Birthday Week 2023
    22 hours ago
    Cloudflare now uses post-quantum cryptography to talk to your origin server
    Cloudflare now uses post-quantum cryptography to talk to your origin server
    2 days ago
    Privacy-preserving measurement and machine learning
    Privacy-preserving measurement and machine learning
    2 days ago
  • News
    News
    This category of resources includes the latest technology news and updates, covering a wide range of topics and innovations in the tech industry. From new…
    Show More
    Top News
    Why is it so popular and why is it dangerous?
    12 months ago
    How to calibrate the display on a smartphone?
    12 months ago
    5 Useful Things Google Maps Can Do
    12 months ago
    Latest News
    How to enable extensions for Google Bard AI
    2 days ago
    Window 11 Copilot: 10 Best tips and tricks
    2 days ago
    How to create AI images with Cocreator on Paint for Windows 11
    3 days ago
    How to install September 2023 update with 23H2 features for Windows 11
    4 days ago
  • Glossary
  • My Bookmarks
Reading: Cryptocurrency miners in Youtube ads
Share
Notification Show More
Aa
Aa
10alert.com10alert.com
  • Threats
  • Fix
  • How To
  • News
  • Glossary
  • My Bookmarks
  • Threats
    • WordPress ThreatsDanger
  • Fix
  • How To
  • News
  • Glossary
  • My Bookmarks
Follow US
Threats

Cryptocurrency miners in Youtube ads

Tom Grant
Last updated: 13 October
Tom Grant 12 months ago
Share
5 Min Read

More often than not, people knowingly install miners on their computers in an attempt to cash in on the cryptocurrency craze. However, in 2017, attackers got the idea of planting hidden miners in other people’s computers through special malware loaders with the goal of earning more by feeding off someone else’s hardware and electricity.

Next, the shrewd extractors of cost-free cryptocurrency learned how to embed otherwise harmless scripts (Web miners) in websites, and to make use of multiple victims’ computers without having to install malware on each of them. That way, they maximized their victims, which also included smartphone users.

Now, cybercriminals have come up with a new scheme: Instead of embedding mining scripts in the code of a website, some bright spark decided to embed them in YouTube ads and thus spread them across multiple pages and videos without the attackers having to do anything.

How mining through advertising works

The key point is that JavaScript code can be embedded in ads. Usually it’s done to create interactivity: Click to shoot down the plane!, for example. Or to track user behavior: So-and-so watched cat videos for 10 minutes, so next time show cat food ads. But there’s nothing to prevent cybercrooks from similarly embedding JavaScript Web miners, the most notorious being Coinhive.

Anyway, the basic mechanism is the same whatever the Web miner: You go to the site and play a video, and then your computer starts generating cryptocurrency for the script’s “providers” — and everything on your end is horribly sluggish as a result.

What’s more, the cybercriminals even have the cheek to offer fake antivirus solutions in banners containing the hidden miner. After clicking on the banner and downloading the program, the user gets infected instead of protected.

It’s no accident that hosted videos have become a favorite attack platform. First, as we already said, the mechanism for displaying ads on a site does most of the attackers’ work for them in terms of distribution. By the way, a curious fact: Web-mining cybercriminals seem to prefer audiences in France, Spain, Italy, Japan, and Taiwan — it’s in these countries that malicious videos are most prevalent.

Also, people spend a lot of time on YouTube, and the longer the computer works on generating cryptocurrency, the more it will create. Lastly, users trust well-established sites like YouTube, especially now that Google is behind it. So if a video starts acting up, users are more likely to pin the blame on their Internet connection or background software, not problems with video-hosting security.

So your computer is doing a spot of mining for someone else — what’s the big deal? Why not just admire their skill and let the cybercriminals earn a couple of cryptocoins?

Well, for one thing, you’re wasting electricity and having your enjoyment spoiled while making someone else rich. Is that what you want? Second, when your computer’s on its last legs with smoke pouring from its vents, will you praise the invention of cryptocurrency or curse it?

If someone is mining on your machine without your knowledge, you have bad news that could get worse. Want to use Photoshop to edit some pics while playing your favorite YouTube mix in the background? You (or rather your computer) will get hot just opening the program. Same for games.

Web-mining schemes are getting more sophisticated, but it’s still fairly simple to stay safe. The main thing is to look after computer security and install a decent antivirus solution. Kaspersky Internet Security, for example, can detect such scripts on any website. With it installed, no one can hijack your machine to mine cryptocurrency, let alone deliver Trojans or conventional hidden miners, which are still making the rounds.


Source: kaspersky.com

Translate this article

TAGGED: Malware, Security, Software, Threats, Trojan, YouTube
Tom Grant October 13, 2022 October 7, 2022
Share This Article
Facebook Twitter Reddit Telegram Email Copy Link Print

STAY CONECTED

24.8k Followers Like
253.9k Followers Follow
33.7k Subscribers Subscribe
124.8k Members Follow

LAST 10 ALERT

Detecting zero-days before zero-day
Detecting zero-days before zero-day
Apps 22 hours ago
See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
Apps 22 hours ago
Network performance update: Birthday Week 2023
Network performance update: Birthday Week 2023
Apps 22 hours ago
Cloudflare now uses post-quantum cryptography to talk to your origin server
Cloudflare now uses post-quantum cryptography to talk to your origin server
Apps 2 days ago
Privacy-preserving measurement and machine learning
Privacy-preserving measurement and machine learning
Apps 2 days ago

You Might Also Like

Detecting zero-days before zero-day
Apps

Detecting zero-days before zero-day

22 hours ago
See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
Apps

See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan

22 hours ago
Cloudflare now uses post-quantum cryptography to talk to your origin server
Apps

Cloudflare now uses post-quantum cryptography to talk to your origin server

2 days ago
Privacy-preserving measurement and machine learning
Apps

Privacy-preserving measurement and machine learning

2 days ago
Show More

Related stories

How to upgrade to Windows 11 23H2 with Installation Assistant
How to install September 2023 update with 23H2 features for Windows 11
How to get the latest Windows 11 innovations
How to blur image background in Photos for Windows 11
How to download official Windows 11 23H2 ISO file
PHP Object Injection Vulnerability in Flatsome Theme

10 New Stories

Encrypted Client Hello – the last puzzle piece to privacy
Beware of scammers! Dangerous apps in the App Store
How to enable extensions for Google Bard AI
Reminder: Enable two-factor authentication wherever you have it. This business
​​Know exactly when your data is transferred to GoogleIn a world where our data is permanent
​​Fake correspondence with the iPhone interfaceIn a world where digital communication is
Previous Next
Hot News
Detecting zero-days before zero-day
See what threats are lurking in your Office 365 with Cloudflare Email Retro Scan
Network performance update: Birthday Week 2023
Cloudflare now uses post-quantum cryptography to talk to your origin server
Privacy-preserving measurement and machine learning
10alert.com10alert.com
Follow US
© 10 Alert Network. All Rights Reserved.
  • Privacy Policy
  • Contact
  • Customize Interests
  • My Bookmarks
  • Glossary
Go to mobile version
adbanner
AdBlock Detected
Our site is an advertising supported site. Please whitelist to support our site.
Okay, I'll Whitelist
Welcome Back!

Sign in to your account

Lost your password?