March 5, 2018 By Shane Schick 2 min read

According to new research, the number of domains hosting cryptocurrency mining scripts jumped 725 percent over a four-month period at the end of 2017. This drain on computing resources may go hand in hand with malware threats.

Mining Scripts Multiplying in 2018

Internet security firm Cyren analyzed data based on a scan of 500,000 websites, some of which may have been running cryptocurrency mining scripts without their owners’ knowledge. In fact, the number of sites supporting the mining of cryptocurrencies such as Monero doubled month over month in December 2017 and again in January 2018, which could indicate that such activities are ramping up significantly, according to the report.

There’s more at stake here than just degraded CPU performance. As Dark Reading pointed out, cybercriminals could embed a malicious executable file to be activated at a later date using the same code. CoinHive is among the miners that are easiest to obtain, but the propensity for misuse is making it a target for tools that normally scan machines for traditional malware and other threats.

Cryptocurrency Mining: A Lucrative Threat

Almost anything is at risk for attack when it comes to harnessing power for cryptocurrency mining. Around the time that Cyren published its research, NewsBTC reported, Avast showed how cryptocurrency mining scripts could be injected into smartphones and connected home devices at Mobile World Congress. The firm demonstrated that cybercriminals could earn as much as $1,000 in four days by taking over 15,000 Internet of Things (IoT) devices.

Another option is to look for a big-name target with lots of computing power at its disposal. That is likely what prompted fraudsters to hijack an Amazon Web Services account owned by car manufacturer Tesla, as reported by Fortune.

As the market for cryptocurrency heats up, organizations are likely to see more incidents like these with even more dire consequences.

More from

We are moving!

< 1 min read - SecurityIntelligence.com is being sunset, but have no fear!We have a new home for all of your favorite security and X-Force content.Follow us to www.ibm.com/think to maintain access to the stories and news you love, both new and old.Security Intelligence will officially sunset on Friday, March 28, 2025. To access the latest security thought leadership, go here. To access the latest X-Force research, go here.If you are experiencing cybersecurity issues or an incident, contact X-Force® to help:US hotline: 1-888-241-9812 | Global hotline:…

Bypassing Windows Defender Application Control with Loki C2

10 min read - Windows Defender Application Control (WDAC) is a security solution that restricts execution to trusted software. Since it is classified as a security boundary, Microsoft offers bug bounty payouts for qualifying bypasses, making it an active and competitive field of research.Typical outcomes of a WDAC bypass bug bounty submission:Bypass is fixed; possible bounty awardedBypass is not fixed but instead "mitigated" by being added to the WDAC recommended block list. Likely no bounty awarded but honorable mention is typically givenBypass is not…

FYSA — VMware Critical Vulnerabilities Patched

< 1 min read - SummaryBroadcom has released a security bulletin, VMSA-2025-0004, addressing and remediating three vulnerabilities that, if exploited, could lead to system compromise. Products affected include vCenter Server, vRealize Operations Manager, and vCloud Director.Threat TopographyThreat Type: Critical VulnerabilitiesIndustry: VirtualizationGeolocation: GlobalOverviewX-Force Incident Command is monitoring activity surrounding Broadcom’s Security Bulletin (VMSA-2025-0004) for three potentially critical vulnerabilities in VMware products. These vulnerabilities, identified as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, have reportedly been exploited in attacks. X-Force has not been able to validate those claims. The vulnerabilities…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today