Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Timeline of cryptojacking scripts/malware #7

Open
tmursch opened this issue Dec 14, 2017 · 4 comments
Open

Timeline of cryptojacking scripts/malware #7

tmursch opened this issue Dec 14, 2017 · 4 comments

Comments

@tmursch
Copy link
Contributor

tmursch commented Dec 14, 2017

We need to catalog the creation date of cryptojacking scripts/malware found. A list of past/present cryptojacking scripts/malware found needs to be documented first.

@shayanb
Copy link
Owner

shayanb commented Dec 14, 2017

2017-09-16 - First instances of Coinhive API usage (based on censys top 1M websites dataset)
2017-10-17 - First instances of Authedmine (based on censys top 1M websites dataset)
2017-11-23 - LiveHelpNow Hack incident (https://blog.livehelpnow.net/security-incident-nov-23rd-2017/)

Timeline on copycats (cryptoloot and ...)

@dougsillars
Copy link

This matches the HTTPArchive (updated every 2 weeks).
for mobile sites:
09/01/17 had 0 entries
9/15/17: 467 entries

Desktop:
9/01/17 had 0 entries
9/15/17: 529 entries

@dougsillars
Copy link

As for a list: here is an AdBlock based list:
https://github.com/hoshsadiq/adblock-nocoin-list/

@tmursch
Copy link
Contributor Author

tmursch commented Dec 14, 2017

Here's another list, however it's not limited to specifically cryptojacking scripts. Other cryptomining domains are included. I will review further to extract browser based (JavaScript) services.

https://zerodot1.github.io/CoinBlockerLists/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants