Skip to content
October 28, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Malware
  • Symantec report: cryptocurrency coin mining increased by 8,500 percent in Q4 2017
  • Malware

Symantec report: cryptocurrency coin mining increased by 8,500 percent in Q4 2017

Do Son March 22, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

According to a new report from Symantec, the cryptocurrency coin mining incident in the last quarter of 2017 rose by 8500%. Cryptocurrency coin mining refers to hijacking another person’s computer for cryptocurrency mining. According to statistics, the proportion of attacks of this type of attacks in the last quarter of December and the last quarter reached 24% and 16%, respectively, and that time is exactly when the price of Bitcoin and other cryptocurrencies fluctuates sharply.

Symantec learned from the tracking of encrypted hijacking that part of the reason for its rise was because of the ease of operation and the low threshold of mining software. It has become one of the ways many people make money. Overall, the number of escalation hijackings in 2017 rose by 34,000%.

The report pointed out that the use of other people’s computer CPU mining is easier than installing the virus on the target computer. It can even be performed after the user finishes patching the computer. Last year, the Showtime website was revealed to use user CPU to dig Monero currency. Recently, Apple removed the Calendar 2 software on the Mac App Store, which was also found to use user computers to dig Monroe coins.

Image: Symantec

Symantec said that encrypted hijacking will allow those unsuspecting victims’ devices to run slower, the batteries will overheat, and the lifespan will be shorter. When this type of attack targets a large-scale target-like enterprise network, It may be due to mining software shutdown situation, but if it is small, it is not so easy to be found. The report writes: “This allows cybercriminals to make money without victims even realizing they have something unwanted on their machine or on the website they are visiting.”

As encryption hijackers still have a lot of rewards for cryptocurrency miners, it may still be a big problem. Unless these cryptocurrency prices continue to drop until the first time in 2009, these people will naturally disappear because they are no longer profitable.

Source: theverge

Related coverage

  • GOLD BLADE Unleashes RedLoader with Novel Attack Chain: LNK Files + WebDAV + DLL Sideloading Evades Detection
  • ClickFix: The High-ROI “Living-off-the-Land” Trap Sweeping Windows and macOS
  • Cybercriminals Target LatAm Banks: Mekotio, BBTok Lead the Charge
  • AdsExhaust: New Adware Masquerading as Oculus Installer Wreaks Havoc
  • Phishing Campaign Abuses Microsoft Power BI to Install Rogue ScreenConnect Clients
  • New Vega Stealer malware used Microsoft Word as an attack vector
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: cryptocurrency coin mining

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 28, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 28, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 28, 2026
  • CVE-2016-20097CVSS 8.7
    Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers...
    Watchtower Verified📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-61567CVSS 10.0
    AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in `webSiteRootURL`,...
    📅 Updated: Oct 28, 2026
  • CVE-2026-61564CVSS 10.0
    AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.php` assembles `videos/configuration.php` by interpolating request...
    📅 Updated: Oct 28, 2026
  • CVE-2026-91243CVSS 9.6
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions...
    📅 Updated: Oct 28, 2026
  • CVE-2026-91250CVSS 9.9
    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
    📅 Updated: Oct 28, 2026
  • CVE-2026-91251CVSS 9.9
    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
    📅 Updated: Oct 28, 2026
  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Oct 28, 2026
  • CVE-2026-118690CVSS 9.3
    Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log...
    📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.