New Cryptocurrency Miner Continues Operations After Browser Closes
Despite its recent ups and downs, Bitcoin and other forms of cryptocurrency are still worth a lot of money which is likely why we’ve seen the rise of cryptomining software popping up on various websites. The software uses the power of a visitor’s computer to mine cryptocurrency often without making the users aware of the process though they likely notice the spike in their computer’s processor. Such software has been found on PirateBay and even more “legitimate” sites like Politifact.
Of course, normally you can solve this problem simply by closing the browser, however, Malwarebytes Lab has reported that they’ve discovered evidence of some sites which continue to mine for cryptocurrency after the users have closed the browser. They do this by taking advantage of pop-up windows which are hidden below the Windows taskbar.
“The trick is that although the visible browser windows are closed, there is a hidden one that remains open. This is due to a pop-under which is sized to fit right under the taskbar and hides behind the clock….
…If your Windows theme allows for taskbar transparency, you can catch a glimpse of the rogue window. Otherwise, to expose it you can simply resize the taskbar and it will magically pop it back up.”
It probably won’t surprise too many people to learn that this particular trick was first discovered on a porn site though it could find its way to other sites in the future.
Thankfully, it isn’t too hard to get rid of despite how well hidden it is. The window might be able to hide from the naked eye, but it can’t hide from your task manager. It shouldn’t be too hard to search for any suspicious looking browser processes and terminate them.
Unfortunately, problems such as these are likely to get worse in the future. The value of cryptocurrencies are on the rise and there’s no shortage of bad actors waiting to take advantage of users.
Eric is an avid tech junkie, gamer, and comic fan. When he's not working on his PC, you'll find him at your local comic book shop.