Coinhive closure could spell the end for ‘cryptojacking’ attacks

Experts say good riddance to “ethically bankrupt” platform whose script was used in ‘thousands of crimes’

Images of model workers mining the Monero cryptocurrency

The administrators of widely-used cryptocurrency mining website Coinhive has announced the platform is shutting down, throwing the future of cryptocurrency mining into doubt.

From Friday 8 March, users were no longer able to engage in web-based cryptocurrency mining using the Coinhive API. Its developers have attributed the sudden decision to a host of economic factors, declaring it is no longer financially viable to keep the project alive.

"Some of you might have anticipated this, some of you will be surprised. The decision has been made. We will discontinue our service on March 8, 2019," the Coinhive team said. "It has been a blast working on this project over the past 18 months, but to be completely honest, it isn't economically viable anymore."

Coinhive was established in late 2017 as a platform that offered a JavaScript mining API for the Monero blockchain that could be embedded in other websites. As a principle, it offered a way to use other CPU power to perform calculations to generate or 'mine' Monero coins; this could be done on a dedicated PC or setup on another person's PC, with or without their knowledge and consent

Advertisement
Advertisement - Article continues below

Some organisations, such as the UNICEF, used this in innovative ways. Last May the global charity announced it would use Coinhive to obtain donations in the form of cryptocurrency mined via users' computational power.

But Coinhive's rise in popularity also led to an explosion of malicious users infecting computers with malware loaded with cryptocurrency mining scripts that worked surreptitiously in the background of a victim's system.

In March 2018 Symantec researchers found that 'cryptojacking' cyber attacks experienced an 8,500% surge. Moreover, 24% of all hacks the company blocked in December 2017 were aimed at hijacking CPU power to mine digital currencies.

Experts have also suggested that Coinhive's demise could signal a death knell for 'cryptojacking', given the platform represented a mammoth 62% share of all mining services according to figures from Bad Packets Report.

"Coinhive was absolutely part of the cyber-crime eco-system and proved to be ethically bankrupt," said cryptocurrency expert Ian Thornton-Trump, who told IT Pro it was the best news he had seen in 2019.

"Although Coinhive cited that it was not economically viable to continue operations, their script was used in thousands of crimes and computer intrusions by unknown third parties. It seems to me the legal exposure and liability of Coinhive could have been extraordinarily high."

Moreover, Thornton-Trump said he had hoped to see a host of criminal investigations, namely US Department of Justice indictments for wire fraud, conspiracy to commit unauthorised access to protected computer system and aiding and abetting.

He also speculated a joint investigation with German Police and US authorities may already be underway, and that he is still holding out hope for an indictment one day, as the DOJ "has a very long memory and a very long reach".

Coinhive cited a combination of mainly economic factors for its closure, including a more than 50% drop in Monero's 'hash rate', defined as the rate at which Monero was available relative to the power needed to mine it.

The cryptocurrency market crash of September 2018 was also a massive factor. Every one of the world's top 100 most traded cryptocurrencies was hit by the crash, with Monero depreciating in value by 85% within a year according to Coinhive.

Advertisement
Advertisement - Article continues below

The final nail in the coffin was a 9 March hard fork in the way Monero's blockchain worked and an algorithm update to the Monero network that was announced in February.

Avast's threat intelligence director Michal Salt, meanwhile, said it's difficult to predict whether browser-based cryptojacking will rise again after Coinhive's closure, or if another mining service will fill the void.

"Even if another service decides to fill the gap Coinhive will leave, it may not be as successful as Coinhive once was, if it doesn't allow cybercriminals to mine for their own financial gain," he said.

"Ultimately, Coinhive going out of business is a good thing for security, privacy, and transparency. Their business model relied upon taking 30% of all the coins mined on their service, and reportedly 100% of the money from coin that was mined on accounts that had been shut down for abuse."

Although mining is no longer possible via Coinhive, users' dashboards will still be accessible until 30 April so that payouts can be initiated.

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now
Advertisement

Recommended

Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/business/business-strategy/354252/huawei-takes-the-us-trade-sanctions-into-its-own-hands
Business strategy

Huawei takes the US trade sanctions into its own hands

3 Dec 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019
Visit/mobile/mobile-phones/354273/pablo-escobars-brother-launches-budget-foldable-phone
Mobile Phones

Pablo Escobar's brother launches budget foldable phone

4 Dec 2019