Firefox Extension Delivers Monero Cryptocurrency Miner
NJCCIC Alert
Original Release Date: 2018-02-01
A malicious Firefox extension, dubbed Image Previewer, displays popups and delivers an in-browser cryptocurrency miner to unsuspecting users. Websites masquerading as Firefox updates push the add-on to end users through persistent JavaScript alerts and user authentication prompts. Once installed, the Monero miner hijacks CPU processing power in an effort to generate revenue for the developers.
The NJCCIC recommends users who installed Image Previewer remove it immediately and consider using an antivirus software that detects cryptocurrency miners. Additionally, check the Mozilla Add-on Repository before downloading browser extensions for a list of validated add-ons.
Featured Content
- Disaster Relief and Tragedy-Related Scams>
- Flaw in Cosmo DB Could Allow Access to Databases>
- Threat Actors Use Messaging Service as Phishing Lure>
- Back-to-School Cybersecurity>
- Patch Now: Active Exploitation of Microsoft Exchange ProxyShell Vulnerabilities >
- T-Mobile Breach>
- Test Your Cybersecurity Knowledge - Take Our Cyber Quiz Today>
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.