Malware threats are vicious and can go after users’ data, files, or resources. Crypto miners are one of the few infections that take their job literally. Its task is to steal users’ electricity for mining cryptocurrency.
Typically, malware instantly starts working and stealing the data it needs. However, a new infection targeting Windows PCs has recently been detected. Unlike similar infections, the new crypto miner does not work as soon as victims install it. Instead, it waits sometime before making any changes or starting to mine cryptocurrencies.
To further discuss this new way of crypto-mining, we must explain what crypto-mining is and how this malware enables this activity.
A brief overview of the discovery
Researchers at Check Point shared their findings on a malware campaign dubbed Nitrokod. It has been active since 2019. What makes this infection stand out is its operation. It waits a month before starting to work on the infected device. However, once the waiting period ends, the malware functions as unwanted crypto-mining software.
What is crypto mining?
People have found a way to mine cryptocurrencies, like physically mining for gold or other valuables. However, mining cryptocurrencies requires high-tech equipment and a lot of electricity.
Crypto-mining may not seem like a massive expense considering the current value of some cryptocurrencies – you can make a significant profit. However, some cybercriminals wanted to find ways to stop using their electricity and money to mine for these valuables. Instead, they have started using other people’s PCs to do the job and acquire cryptocurrencies without any expenses.
That is what this new malware is about; let’s see how it enables crypto mining on one’s PC.
How does this malware do the mining?
At first, the malware may seem harmless and even desirable. As harmful as it is to any device, PC users install it – unknowingly. The malware hides in many software tools you may download on your PC – fake desktop versions of popular apps. Once you download an infected one, it will sit idly for a month before activating and mining for crypto.
Hijacking a computer to secretly mine crypto is crypto-jacking.
However, there is no need to worry about infecting your PC with this malware if you download all your apps from verified sites. The malware in question is usually inside apps that don’t have a desktop version. For example, there isn’t a verified Snapchat app you can download on your PC.
Imagine seeing the latest news that you can download this app on your PC and use it just as you would on your phone. You might instantly be attracted to the idea of downloading it, but you shouldn’t because there is a high chance the app is infected.
What happens if you download it?
On the other hand, if you decide to download the suspicious app, you will receive it as a .rar file that requires a password. Once the installation is complete, the cryptojacker will officially be in your system.
What happens if you download the malware with these apps and allow it to enter your PC? It won’t start working as soon as you download it; it will take some time (usually a month) to see that there is something wrong with your PC. By that time, the malware will have already mined a cryptocurrency.
You probably won’t notice that your PC has been infected until you receive your electricity bill. The numbers may be tremendously high, and you may instantly think that there was a mistake with printing, but that is not the case. You may not even think about the malware on your PC.
What is worse is that this malware is not only mining for cryptocurrencies. Once it enters your system, it can do whatever cybercriminals programmed it to do. It can even expose you to other types of cybercrime, such as misusing your personal information.
How to protect your PC?
Accidentally infecting your PC with this malware undoubtedly sounds disconcerting. However, there are ways to keep that from happening and your PC safe and secure from any other possible harm.
The first rule is to avoid unknown applications and files. They could carry various types of infections. Additionally, cryptojacking scripts can affect your device if you visit dangerous websites. It is best to protect your internet connection and block such scripts for that purpose. A VPN for Windows can offer protection by encrypting internet traffic. Some Virtual Private Networks also have additional features, like blocking potentially malicious websites and cryptojacking.
Conclusion
This new crypto-mining malware news may be alarming to all PC users. Luckily, the word about this activity is spreading, and you can protect your PC from trojan apps.
One of the best ways to protect your PC is to use a VPN server. This server will protect you from attacks like this one and any other cybersecurity threat that may take place.
Malware like this cryptojacker, which hides on your PC for a month, silently damages your data, and pushes up your electricity bill, is one of the worst, but you can keep an eye out and keep yourself safe.
