Tuesday, January 9, 2018

Hidden iframe as Bitcoin miner

This website
hxxp://cdema[.]org/

(you can safely view it here at urlscan.io) https://urlscan.io/result/5776cb2c-d26d-44a8-8d58-5cd10340f4ef/dom/ has a hidden iframe (notice the "display: none;") that loads a bitcoin miner in the background

No comments:

Post a Comment