HackerPapers

arXiv:1808.00811cs.CR

Digging into Browser-based Crypto Mining

Jan Rüth, Torsten Zimmermann, Konrad Wolsing, Oliver Hohlfeld

Abstract

Mining is the foundation of blockchain-based cryptocurrencies such as Bitcoin rewarding the miner for finding blocks for new transactions. The Monero currency enables mining with standard hardware in contrast to special hardware (ASICs) as often used in Bitcoin, paving the way for in-browser mining as a new revenue model for website operators. In this work, we study the prevalence of this new phenomenon. We identify and classify mining websites in 138M domains and present a new fingerprinting method which finds up to a factor of 5.7 more miners than publicly available block lists. Our work identifies and dissects Coinhive as the major browser-mining stakeholder. Further, we present a new method to associate mined blocks in the Monero blockchain to mining pools and uncover that Coinhive currently contributes 1.18% of mined blocks having turned over 1293 Moneros in June 2018.

arXiv comments
IMC '18: Internet Measurement Conference
Journal reference
Jan Rüth, Torsten Zimmermann, Konrad Wolsing, and Oliver Hohlfeld. 2018. Digging into Browser-based Crypto Mining. In IMC '18: Internet Measurement Conference, October 31-November 2, 2018, Boston, MA, USA. ACM, New York, NY, USA, 7 pages
DOI
doi:10.1145/3278532.3278539
Subjects
cs.CRCryptography and Security cs.NINetworking and Internet Architecture

On Hacker News

Linked by 2 identifiable commenters in 2 comments across 2 threads, from Aug 2018 to Sep 2018. Found in 2 HN submissions from Aug 2018 to Sep 2018. Open submission discussions.

Comments linking this paper, per year.

Discussed in comments2 threads

    • One potential use is to find signatures related to crypto miners: https://badpackets.net/how-to-find-cryptojacking-malware/ Crypto miners are ncreasingly using webassembly and multithreaded executables in background processes. Details in this recent report on state of browser…

      ArtWombView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.