{"id":36148,"date":"2014-06-24T14:34:50","date_gmt":"2014-06-24T21:34:50","guid":{"rendered":"http:\/\/blogs.mcafee.com\/?p=36148"},"modified":"2025-08-17T22:46:38","modified_gmt":"2025-08-18T05:46:38","slug":"facebook-trojan-bitcoin-mining","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/facebook-trojan-bitcoin-mining\/","title":{"rendered":"Trojan Turns Computers Into Bitcoin Mining Machines"},"content":{"rendered":"

It has long been known that Bitcoin\u2014the crypto-currency offering users almost completely anonymous transactions online\u2014is the favored currency<\/a> for the underworld. It is so popular, in fact, that hackers are going out of their way to turn mundane objects connected to the Internet\u2014objects like thermostats, scales and refrigerators\u2014into Bitcoin mining machines in an effort to create more of this precious virtual currency.<\/p>\n

Though they exist entirely in the ether, bitcoins don\u2019t appear out of thin air. Rather, they are created through a process called \u201cmining,\u201d requiring a user to purchase special hardware and dedicate a part, or all, of their computer to solving complex mathematical problems in order to \u201cmint\u201d a bitcoin. These problems get more complicated as more bitcoins are created, making it harder to mine the currency. Hackers, however, have found a solution: distribute the mining of bitcoins to multiple machines by hijacking computers into a network working towards a single goal\u2014creating bitcoins.<\/p>\n

To some, it may seem like a harmless exploit to create a currency that may or may not survive the year<\/a>. But to others, namely those who create malicious software, a widespread Bitcoin mining Trojan<\/a>\u2014a malicious program that disguises itself as something else\u2014could be a means to a different end.<\/p>\n

For example, consider the latest Bitcoin miner Trojan to hit the Internet. Spread through Facebook, this Trojan compromises victims through a little tactic we in the security world refer to as \u201csocial engineering.\u201d<\/a><\/p>\n

Social engineering is the basic principal behind all hacking. It exploits relationships to compromise accounts, computers and networks. The social aspect of the compromise can manifest in a few ways: through the collection of publicly available information available both online and off; through deceit, by impersonating a trusted friend online; by posing as a vendor or support agent; or by simply leaving a USB stick behind in the hopes that people\u2019s nosy nature will lead them to inserting it into their own computer.<\/p>\n

This particular Trojan tricks victims into thinking their friends are sharing a photo with them via a private chat in Facebook. In truth, the file contains a disguised program built to hijack a small part of your computer for Bitcoin mining. After it installs itself, the Trojan sends data back to the main server.<\/p>\n

Mining, it appears, is this program\u2019s purpose. But the infection also happens to install a backdoor<\/a>\u2014one which allows the hackers in control of the Trojan to install additional malware<\/a> on your computer.<\/p>\n

That\u2019s worrisome.<\/p>\n

Protect Your Devices from Being Hijacked<\/h2>\n

So how can you protect your devices from being hijacked for nefarious purposes? Well, there are a few things you can do:<\/p>\n