YouTube serves ads with CPU-draining cryptocurrency miners
Post number #148265, ID: 6dc684
|
YouTube was recently caught displaying ads that covertly leach off visitors' CPUs and electricity to generate digital currency on behalf of anonymous attackers, it was widely reported.
Word of the abusive ads started no later than Tuesday, as people took to social media sites to complain their antivirus programs were detecting cryptocurrency mining code when they visited YouTube. The warnings came even when people changed the browser they were using,
Post number #148266, ID: 6dc684
|
and the warnings seemed to be limited to times when users were on YouTube. On Friday, researchers with antivirus provider Trend Micro said the ads helped drive a more than three-fold spike in Web miner detections. They said the attackers behind the ads were abusing Google's DoubleClick ad platform to display them to YouTube visitors in select countries, including Japan, France, Taiwan, Italy, and Spain.
Post number #148267, ID: 6dc684
|
The ads contain JavaScript that mines the digital coin known as Monero. In nine out of 10 cases, the ads will use publicly available JavaScript provided by Coinhive, a cryptocurrency-mining service that's controversial because it allows subscribers to profit by surreptitiously using other people's computers. The remaining 10 percent of the time, the YouTube ads use private mining JavaScript that saves the attackers the 30 percent cut Coinhive takes.
Post number #148268, ID: 6dc684
|
Both scripts are programmed to consume 80 percent of a visitor's CPU, leaving just barely enough resources for it to function. "YouTube was likely targeted because users are typically on the site for an extended period of time," independent security researcher Troy Mursch told Ars. "This is a prime target for cryptojacking malware, because the longer the users are mining for cryptocurrency the more money is made."
Post number #148269, ID: 6dc684
|
While drive-by cryptocurrency mining is an abuse that drains visitors' electricity and computing resources, there's no indication that it installs ransomware or other types of malware, as long as people don't click on malicious downloads.
Post number #148323, ID: 1ec38e
|
>not using any sort of ad blocking technique in current year >not downloading videos exclusively with youtube-dl and watching them in native video player
Post number #148345, ID: 7cc72c
|
>>148323 no one actually does the second one just saying
Post number #148357, ID: e80e9a
|
>>148345 I am not OP and I do that. I check the video I want and after I find it I get it with y-dl. Even specifying the format and resolution to be no more than 720p for I do not need it higher. Then I move on to find the next which interests me and the process repeats. Of course there is time spent on the site, but it is by orders of magnitude less than it would be if I watched directly online. I do this for more than 5yrs by now. It has become a habit and instictive.
Post number #148475, ID: 92b629
|
Holy shit.
Post number #148510, ID: e9db15
|
>>148323 I didn't think anyone did this just to watch vids on the regular, I used to do that either to download music or to keep videos that I liked.
Post number #148563, ID: 83be4d
|
Dunno about others, but RU youtube is filled with hydra (darknet drug store) prerolls
Post number #148683, ID: 6d4b5d
|
I have no JavaScript enabled on youtube. HTML5 works like a charm.
Total number of posts: 12,
last modified on:
Wed Jan 1 00:00:00 1518724949
| YouTube was recently caught displaying ads that covertly leach off visitors' CPUs and electricity to generate digital currency on behalf of anonymous attackers, it was widely reported.
Word of the abusive ads started no later than Tuesday, as people took to social media sites to complain their antivirus programs were detecting cryptocurrency mining code when they visited YouTube. The warnings came even when people changed the browser they were using,