Don't mine for the hackers

in #security7 years ago

1.PNG

It is reported that cryptocurrency mining malware has been breach from thousands of website to Google play store applications.

Coinhive, a site that offers a friendly programming interface to enable any website turning their visitor's computer into mining machine for the website owner. A couple of multi-million downloaded applications from Google play store is taking advantage of user phone for illegal mining activities too, but no name of the applications was revealed.

For preventive measures:

  • Install this Chrome extension to block all Coinhive malware.
  • Apply good internet surfing habit, pay caution visiting potentially malicious websites.
  • Don't simply download untrustable applications even from Google Play store.
  • Lastly, monitor the abnormal behavior of your devices like unusual high CPU usage or a drastic drop in the phone's battery. They might be infected if high computing power was consistently being consumed without reasons.

报道指出不单是网站有可能让你的电脑为陌生人挖矿,手机也成为了新目标。

Coinhive 提供了友善的编码界面让网站拥有者可以很容易的在自家网站装上,到访者的电脑就会被感染从而为之挖矿而不自知。Google play store 上也有数个拥有百万下载量的 App 会感染手机为远方的黑客挖矿,App 名字则被保密。

自保的方针有:

  • 在电脑装上这个 Chrome 插件可以有效抵挡 Coinhive 攻击。
  • 养成良好的上网习惯,拒绝访问来历不明的网站。
  • 别随意下载应用软件,即使是来自Google Play store 这种官方渠道。
  • 最后,密切观察设备的不正常状态。要是电脑的 CPU 使用帧率长时间处于高度使用状态,或是手机电池无故急剧下跌,那你很可能中奖了。

Sort:  

多谢提醒!

小心在意

ohh.. yesterday I posted an article on same topic and how it works.. and how attackers exploit it.. Here is the link: https://steemit.com/security/@minemymime/next-xss-gonna-cost-you-some-cpu

Good writing

Thank you.