Listen Up "Coinminer" bitcoin-mining malware on Facebook Messenger!

jeallen01

jeallen01

Specialist Contributor
My Satellite Setup
See Signature
My Location
Somewhere in England (possibly?)!
Just become aware that Facebook Messenger can be carrying the "Coinminer" malware which is a bitcoin-harvesting malware download (and includes “Eldorado” in the filenames). The attached article here

The filename version mentioned in the article is not quite the same as the one which is continually being picked up by System Mechanic’s “System Shield” malware scanner on SWMBO’s W10 Home m/c, and then blocks and reports it like this:
1540925921126.webp

However, the article is a year old and “things evolve”

This only “showed up” after I enabled System Shield, and was/is not caught by Norton Security Premium or the free version of MalwareBytes !

BTW, at the end of the article, there are some illustrations of how the malware appears in the Processes list as “worker.exe” – and grabs 100% of CPU time!! Luckily it’s not there on her m/c.

PS: Not on any other m/c here as I rarely use Faceboook and have never used Messenger!
 
This is still a downside of Windows ..... much as I like my Win 10 Tablet, it does require intervention with various tools to keep it clean. Fortunately (so far, at least) my Mint and Lubuntu equipped devices just "work".
 
Yes there are lots of nasties out there, I am just recovering from my phone and laptop being attacked by something, I have had to reset both however, despite having backups the issue is determining if restoring data is going to reinfect.
 
Don't think there's anything in Facebook Messenger, but people do share links via messenger which host malware.
 
You can get those a lot online now because everything is filled with viruses.
 
This is another reason I don't use Farcebook....
 
Terryl said:
This is another reason I don't use Farcebook....
Click to expand...
Unfortunately, I "need" to use F/B for a very few things (local U3A Computer Club, and a couple of relatives who just "don't know any better") - but I limit that to the absolute minimum - even my profile has the absolute minimum of info, and some of that is deliberately "incorrect" and thus resulting in me getting birthday "congratulations" on totally the wrong date:-rofl2
 
jeallen01 said:
Unfortunately, I "need" to use F/B for a very few things (local U3A Computer Club, and a couple of relatives who just "don't know any better") - but I limit that to the absolute minimum - even my profile has the absolute minimum of info, and some of that is deliberately "incorrect" and thus resulting in me getting birthday "congratulations" on totally the wrong date:-rofl2
Click to expand...

Anyone who uses fb should have facebook purity installed on their browser, and set it aggressive.
 
Absolutely - it makes a world of difference.
 
Terryl said:
This is another reason I don't use Farcebook....
Click to expand...
With all due respect there are many websites whose primary landing page contain sniffers and injectors of malware, my ISP landing page had one for a few hours last week, it has nothing at all to do with Facebook which provides a valid service to millions of people who live in different places in the world on differing time zones, whilst I accept that it may not be for everyone, that is not really a valid reason to 'diss' it for everyone else and I agree FB purity is the best way to go with FB.
 
There is a way to keep yourself protected online. What works for me is Auslogics. I learned about it when I looked online for a malware solution. It is really easy to use and install. You go to https://thinkmobiles.com/blog/best-registry-cleaner-tools and download it first. After that you install it and run it to scan your PC for the bad stuff. After scanning it will delete everything that is not needed. It is really cheap and much better than a free version of antivirus which is almost useless. You can never fully protect, but you can stop it a little bit.
 
Smormad said:
There is a way to keep yourself protected online. What works for me is Auslogics. I learned about it when I looked online for a malware solution. It is really easy to use and install. You go to https://thinkmobiles.com/blog/best-registry-cleaner-tools and download it first. After that you install it and run it to scan your PC for the bad stuff. After scanning it will delete everything that is not needed. It is really cheap and much better than a free version of antivirus which is almost useless. You can never fully protect, but you can stop it a little bit.
Click to expand...
Sounds like you are on commission to me, but I'll let it go for this one, any further free advertising will be dealt with as per the rules, which of course you diligently read when you signed up
 
Back
Top