Cryptohacking: ad networks harnessing customer power for monero mining

Some advertising networks and video streaming sites are secretly using the processing power of their users' machines to mine altcoins, namely monero and zcash. All what it takes to get your machine infected with a silent cryptocurrency miner is to click on a pop-up ad. It is that simple.
Some apps are secretly siphoning computing power from users for their own monetary gain. However, these apps aren't alone. Ad networks and streaming sites are similarly funneling energy without permission from users in order to cryptohack monero and other coins.

The Israeli adtech company, Spotad, recently discovered anomalies in code of ads on the company's Sarah network. That code turned out to be a monero (XMR) miner. According to the report, clicking on a pop-up would initiate the mining process.

Co-Founder, Yoav Oz, said that his company was upgrading Sarah to spot cryptocurrency mining scripts, partially by noticing high activity with a lack of clicks. "It was showing a different kind of behavior where users were not clicking much, there was no engagement on the ad. That’s where we got the signals out of our system."

It's not the only service focused on monero in particular. In December, BleepingComputer reported that the Chrome extension, Archive Poster, was doing the same. Marketed as a smooth way to reblog posts on Tumblr, it started receiving user reviews it was linked to Coinhive, the service born just this past September to take advantage of rampant speculation and bullishness in currencies beyond bitcoin.

Why monero? The devil is in the design. It is among the most prominent of the altcoins that does not require enormous processing power to mine. Gargantuan mining operations out of China now dominate the quest for more BTC, but this is not so with monero.

"In contrast, the Monero mining algorithm was specifically designed such that ASICs will not have too much of an advantage over ordinary computers owned by the general public," Monero claims. Yet, of course, the more computing power that is available, the more money there is to extract. Another report implicated Android malware, Loapi, as also harvesting from weaker processors.

Those accustomed to streaming video websites might also start noticing warnings that their computers will be used to mine. The Pirate Bay also began flirting with monero mining in September. It might be more courteous than sites who give no fair warning, but points to another trend. Looking to amplify slagging advertising revenues, several sites are using Coinhive's code to raise supplemental crypto revenue. Showtime and UFC have used it too, for instance.

Despite this week's dip in the markets, recent booms may very well encourage more covert mineware coders. Cybertech will need to catch up with the digital gold rush. Just as bandits robbed wagons heading West of every resource they had in the 1850s, so too are digital thieves looking to steal precious energy from unsuspecting web users.