Bitcoin miner virus wake up in China as the bitcoin price surging. About 150000 bitcoin miner virus emerge every day in the early period of 2019. And it keeps 60000 bitcoin miner virus since April.

For example, the “shadow” mining Trojan virus has been constantly updating itself since its emergence in early March 2019, spreading malicious mining programs by cloud storage. Mining Trojan like “WannMiner”, “BuleHero” emerge as new varieties, spreading rapidly through system vulnerabilities, implanting Monroe coin mining procedures into the infection system.

A bitcoin mining virus is a software that runs on the affected host machine and does bitcoin mining on that particular machine in the background. Because mining is a resource intensive process, this bitcoin miner can take up a substantial amount of resources of your PC if it is running in the background.

Virus intrude by bugs

In the first half of 2019, the main attack mode is by system bugs, which include Windows system bugs and server component bugs. This attack is characterized by fast speed and high success rate for machine attacks with bugs. Mykings, Glupteba and other botnets is the third largest source of dissemination of mining virus.

Regional distribution in China

In the first half of 2019, mining virus is rampant over all China. The most serious areas were those of high density of Internet user. Mining virus has become one of the most common Trojan virus to infect the Internet world.

The profit of mining

The mining virus connects the mining pool to mine, obtains the task from the mining pool, and submits the task to the mining pool after calculation. Because the hashrate of a single equipment is low , it is not able to get the block reward, miners usually connect their miners to the mine pool, contributing their own hashrate to mine, and share the benefits according to their respective contributions. As 81000 computers are controlled to mine with 300 H/s, it is estimated that the daily profits for mining virus is 80000 RMB.

The most popular mining pools among mining virus are f2pool.com, minexmr.com, uupool.cn.

In view of the mining virus incident in the first half year of 2019, it was found that the number of new mining virus was less than that in 2018, but some virus update itself continuously and rapidly, which indicated that the hackers did not focus on the ” one-off  ” deal, but on the continuous operation and rapid iteration of mining virus.