Windows 10: How does a browser injected coin miner work?

I seem to have fell prey to a website that had either intentionally or unintentionally been injected with a coin miner. I first noticed high CPU temps and thought my CPU cooler had failed. Then I found Chrome's high CPU utilization in Task Manager and then the culprit website through Chrome's own task manager.

Is this a form of malware? Does it infect the machine permanently? Or is it's focus to gain your system resources rather than personal information? Access to one's PC in any form is not good in my book. None of my AV mitigation's detected the miner.

Are there any mitigation's that can be put in place to protect ourselves from such breaches? I'm surprised that Chrome does not have a lock on this behavior yet. Appreciate any assistance *Mad

:)

 

Win 10 10586 Remote Desktop intermittantly won't connect from Win 7

I think I have narrowed this problem down to a command I use to run a cryptocurrency Miner for NVidia called ccminer21. I use it to mine coins. In order to get the miner to start while in a Remote Session to the PC, I use a command "tscon 2 /dest:console
& ccminer21.exe" to run it, and also with Administrator rights. This allows me to run the miner while in a Remote session. On 10240, there were no problems.

In 10586, it seems that it will allow me to run the ccminer21 without directing it to the console. But, when I attempt to log back onto the PC, it won't allow me. The fix is to run it with Administrator rights, that way it's not running in my login session,
it's running with elevated rights, and allows me to login again. So the fix is to always run in Administrator rights. Not sure why it is different in the 10586.

I also have to use an older version of the Nvidia drivers, the newer drivers are much slower mining the coins. I have contacted Nvidia, and have not received any advice, or comment on that problem. I just run the older drivers and that fixes that particular
problem.

 

Remote Desktop not working on Win 10 10565

I think I have narrowed this problem down to a command I use to run a cryptocurrency Miner for NVidia called ccminer21. I use it to mine coins. In order to get the miner to start while in a Remote Session to the PC, I use a command "tscon 2 /dest:console
& ccminer21.exe" to run it, and also with Administrator rights. This allows me to run the miner while in a Remote session. On 10240, there were no problems.

In 10586, it seems that it will allow me to run the ccminer21 without directing it to the console. But, when I attempt to log back onto the PC, it won't allow me. The fix is to run it with Administrator rights, that way it's not running in my login session,
it's running with elevated rights, and allows me to login again. So the fix is to always run in Administrator rights. Not sure why it is different in the 10586.

I also have to use an older version of the Nvidia drivers, the newer drivers are much slower mining the coins. I have contacted Nvidia, and have not received any advice, or comment on that problem. I just run the older drivers and that fixes that particular
problem.

 

Hi.
Have a read here:
https://www.wired.com/story/cryptoja...ining-browser/

Explains it pretty well. You need some miner blockers in your browsers, at minimum.

 

Thanks @simrick

I notice that we have a coin mining thread here on Ten Forums in the Antivirus section as well: Protecting yourself from In-Browser Miners Solved - Windows 10 Forums

Apparently if I had Malwarebyte's premium it would have detected the coin miner. It's the first time I've been aware of falling victim to one so will have to bolster security further!

 

Cheers Kol12. It's a jungle out there! *Wink
Please mark the thread as solved.