A very insidious case of cryptojacking by Chrome has been reported by Troy Mursch.
Have you heard of cryptojacking? It’s the practice of secretly using your computer’s resources to mine cryptocurrency without the user’s permission.
Typically, you’ll see the practice on shady websites — popular Bittorrent site The Pirate Bay appears to have experimented with it at one point — but a cryptojacking program has recently been found in a popular Chrome extension.
BleepingComputer reports that Archive Poster, a Chrome extension that helps Tumblr users reblog and repost from other blogs, also runs Coinhive, a cryptojacking program that secretly mines the cryptocurrency Monero using your CPU.
This is noted in several user reviews in the Chrome web store.
“Do not use this extension as it comes loaded with a cryptocurrency mining script. Once installed it makes requests to coinhive which eats up your CPU time and slows your computer down massively. Avoid,” one user wrote.
Archive Poster appears to be quite popular with a total of 105,062 users. Unfortunately, despite recent negative reviews the extension still has a very good overall grade.
While cryptojacking software is not as dangerous as common malware — it typically doesn’t do damage to your computer or files — it’s annoying as it uses your CPU time and potentially slows down your computer considerably.
On the other hand, while mining cryptocurrency on your home computer isn’t very lucrative lately, having tens of thousands of computers mining can be very profitable for the extension’s developer (or the hacker who had managed to infect the extension with the cryptojacking software).
What can you do?
First close your browser and still see whether CPU in task manager shows activity. If yes, delete ArchivePoster completely.
What can you do more?
Top security expert and ethical hacker Jorge Rodriguez founded with me the anti hacking initiative HackerTracker.io. We trace cryptojacker, support ICOs in pre-phase and during launch, check systems and help in emergency cases of system breakdowns. Tell us about attacks, we are ready to provide advice. Blockchain technology is too precious to let it be damaged. It shall bring Return On Society!