Learn about cryptomining malware

What is cryptomining

Cryptocurrencies are digital money that only exist online. Examples include Bitcoin, Monero, and Ethereum. They use a system called a blockchain to record transactions and is resistant to modification.

Cryptomining checks and secures blockchain transactions. It uses a computer processing power called mining to solve complex problems and verify transactions. In return, miners receive a small amount of cryptocurrency.

This system prevents people from using the same money twice. Cryptocurrencies are not controlled by banks or government. This can make cryptocurrency attractive to cybercriminals because it can be transferred globally without central oversight.

Cybercriminals can install cryptomining malware on a device or network without the owner knowing. This is called cryptojacking, and secretly uses your device or network’s processing power to illegally earn cryptocurrency for the cybercriminal.

Warning signs of cryptomining malware

Cryptomining malware can affect computers, laptops, mobile phones, and internet-connected devices such as routers, security cameras, smart TVs and network-attached storage (NAS) drives.

Cryptomining malware can spread in the same ways as other types of malware. It can be:

• in phishing emails with unsafe links or attachments
• hidden in malicious or compromised websites
• hidden in software downloads or browser extensions from untrusted sources
• through outdated software or devices with known security weaknesses
• through devices or networks protected by weak or default passwords
• pretending to be a trusted application on a file-sharing network.

Once installed, cryptomining malware can run quietly in the background. Signs of cryptojacking include:

• slow device performance or crashing
• overheating or loud fans
• higher energy use and faster battery drain.

Internet browsing may also feel slower. For businesses, several affected devices can reduce productivity and increase operating costs. This is because cryptomining malware uses processing power.

How to prevent cryptomining malware

Follow these steps to reduce the risk of cryptomining malware.

• Use antivirus software and automatically download updates.
• Use trusted browser extensions to block malicious activity.
• Regularly update your devices and software.
• Use strong passwords and change default passwords on internet-connected devices.
• Never click on links in emails or messages you aren't expecting. This can include suspicious links from a government agency, well-known organisation, or a friend. Learn more about common scams.
• Disable Microsoft Office macros. Macros automate simple tasks in Microsoft Office documents, but can be used maliciously. Visit the Microsoft website for information on how to enable or disable macros.