Browse Definitions :
Definition

cryptojacking

Cryptojacking is the surreptitious and unauthorized use of a computer for the resource and power-demanding requirements of cryptocurrency mining. The attack essentially creates a cryptomining bot, and the attacker may coopt many systems to create a botnet.

Hackers can use a variety of techniques for cryptojacking. Originally, cryptojacking involved infecting a target system with malware. More recently, however, in a common JavaScript-based method, the attacker creates content that automatically runs cryptomining software in users' browsers when they visit the page hosting it. The attacker may create the content for the purpose of cryptojacking or may compromise an existing site.

In another twist on the practice, researchers for Chinese cybersecurity vendor Qihoo 360's Netlab team recently reported that an ad network was running cryptomining software in the browsers of unsuspecting users who visit the advertisers' websites. Because programmatic advertising places ads automatically, site owners have little control over the issue. The malware used domain generation algorithms (DGAs) to bypass ad blockers and serve ads to all site visitors.

Cryptojacking techniques have been proposed for beneficial uses as well, such as providing a revenue stream for sites and services or crowdfunding for disaster relief efforts. Nevertheless, from the perspective of end users and network administrators, cryptojacking is primarily a drain on processing and power resources.

This was last updated in March 2018

Continue Reading About cryptojacking

SearchCompliance
  • pure risk

    Pure risk refers to risks that are beyond human control and result in a loss or no loss with no possibility of financial gain.

  • risk reporting

    Risk reporting is a method of identifying risks tied to or potentially impacting an organization's business processes.

  • chief risk officer (CRO)

    The chief risk officer (CRO) is the corporate executive tasked with assessing and mitigating significant competitive, regulatory ...

SearchSecurity
  • encryption key

    In cryptography, an encryption key is a variable value that is applied using an algorithm to a string or block of unencrypted ...

  • payload (computing)

    In computing, a payload is the carrying capacity of a packet or other transmission data unit.

  • script kiddie

    Script kiddie is a derogative term that computer hackers coined to refer to immature, but often just as dangerous, exploiters of ...

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • fault-tolerant

    Fault-tolerant technology is a capability of a computer system, electronic system or network to deliver uninterrupted service, ...

  • synchronous replication

    Synchronous replication is the process of copying data over a storage area network, local area network or wide area network so ...

SearchStorage
Close