Crypto-Mining Attacks Fell Sharply in 2019 but Ransomware Is Trending

In the cat-and-mouse game between hackers and users, less-lucrative crypto-mining malware fell out of favor this year.

While security experts at Kaspersky found that the number of “unique malicious objects” rose by 13.7 percent – led in part by a 187 percent increase in so-called web-skimmer files, malware designed to steal credit card information – the total number of mining malware infections fell drastically.

Web-miner infections were down 59 percent year-over-year, from 5,638,828 infected machines to 2,259,038. However, malware like Trojan.Script.Miner.gen, Trojan.BAT.Miner.gen and Trojan.JS.Miner.m are still on the list of top 20 threats. These apps force a user’s computer to mine cryptocurrency, bogging down the user’s computer and essentially stealing electricity.

Related: New Mac Malware Hides in Memory and Masquerades as a Crypto App

“We have observed that the number of ‘common’ attacks against home users is slightly decreasing, but that the number of ‘loud’ public cases of crypto-ransomware infections is growing – for example, just two days ago New Orleans was hit by a ransomware,” said Denis Parinov, a security analyst for Kaspersky.

Parinov believes the hackers involved in mining are moving on to more lucrative opportunities. Interestingly, the company found that even phone scammers were requesting prepaid debit card ransoms rather than cryptocurrencies.

“[Mining attacks] have lost their popularity due to lower profitability and cryptocurrencies’ fight against covert mining,” Kaspersky’s head of anti-malware research, Vyacheslav Zakorzhevsky, said in a statement.

Monero’s role
A few things changed on the security landscape to push crypto into a corner.

Related: Cryptojacking Malware Devs Sentenced to 20 Years in Prison

“One of the most well-known web-mining services, Coinhive, declared that it is no longer economically viable,” he said. “This is due to the Monero hard fork and the severe drop of XMR cost on the market. We suspect this is caused by the market and community reaction to the fact that web mining has been used without user consent in most cases.”

The company found that while crypto-mining attacks fell, there was still interest in crypto-ransomware attacks.

“Crypto-miners and crypto-ransomware operators are still in the game, but their focus appears to have moved to targeted attacks,” said Parinov.

Parinov warns that mining attacks still exist and that users should remain vigilant. He reminded users to watch for unusual network activity or PC slowdowns.

“The main symptom is the slowing down of overall computer or process performance – some freezes or errors can appear on the PC,” he said. “Additionally, crypto mining requires specific network interactions, but these may be hard to spot for the regular PC user.”

Warning: Don't Confuse These Two Kinds Of Digital Assets

If you visit crypto websites or ask casual observers, you might come away thinking there are thousands of "cryptocurrencies" in the world.

Big mistake!

Yes, they're all digital assets. And yes, they look similar on the surface. But less than one-tenth are true cryptocurrencies. So, before you invest another penny, you need to understand not only the differences, but also a few of the nuances.

There are two basic kinds:

Digital assets of the first kind are what we consider true cryptocurrencies. We call them "coins."

They include Bitcoin, Ethereum, Cardano, EOS and others — digital money, which could someday function like dollars, euros or yen, but with much more transparency, efficiency and monetary discipline.

Physically speaking, they're just data saved on computer hard drives following rules defined by specialized software. But that, in itself, should not be particularly surprising. The same is true for the money in your bank account, brokerage account or whole life insurance policy.

What's unique is that the data is not stored in a central location or owned by a single organization. It's automatically replicated and stored on countless computers all over the internet in a way that's virtually hack-free, accessible to everyone and, ideally, controlled by no one.

These coins live on what's called "public blockchains," or more broadly speaking "public distributed ledgers." There are hundreds of them. And many are supported by serious teams of developers.

Digital assets of the second kind are not true cryptocurrencies. Many people call them "ICOs." We call them "tokens."

They have some of the same physical properties as the coins. But with a couple of exceptions, which we'll get to in a moment, they're little more than receipts for financial donations.

These tokens are touted like stocks that you buy in a company. But most are really like tokens that kids get at Chuck E. Cheese Pizza.

Still, in 2017 and 2018, issuers raised more funds with tokens than was raised by all venture capital firms globally, although this trend slowed down considerably in 2019.

There are thousands in existence, and the overwhelming majority are either failures or scams.

Don't ignore the variations and exceptions!

No naming conventions in the world of cryptocurrencies can ever be as simple as analysts like us would like to make them seem. There are always twists, turns, variations and exceptions. Here are the main ones:

Centrally Managed Coins

The best example is what's happening in the banking industry.

Banks and other financial institutions are large, centrally controlled, highly regulated institutions. They are naturally uncomfortable — and arguably incompatible — with digital assets that are completely open to anyone and controlled by no one.

"How in the heck do we enter into a contract with no one?" they ask. "And who do we go to when there's a glitch?"

The Ripple company is the leader in offering a hybrid solution for these institutions. Ripple's coin, called XRP, is technologically similar to other coins. But it's managed and maintained by the Ripple company. That not only offers banks the advantages of enhanced security, efficiency and speed, but it also gives them an organization they can deal with. Facebook's Libra is another ledger that intends to work along similar lines.

Tokens To Coins

Among the thousands of tokens in the world today, most will always be tokens and nothing more. But there are special-purpose tokens that are very different: They're earmarked to be exchanged for actual coins at a predetermined date in the near future.

Here's an example of how it works: EOS is an advanced coin that boasts faster speeds and better scalability than Ethereum. In June of 2017, its sponsors announced they were going to launch the coin in June of 2018. But they needed to raise funds to finance the development.

So, they held an Initial Coin Offering (ICO) for an EOS token on the Ethereum network and raised $4 billion. Then, when they launched EOS on its own "Mainnet," they swapped the Ethereum-based tokens for EOS coins.

This raises the question: Was the Ethereum-based EOS a token or a coin? In our cryptocurrency ratings model, we treat it as a coin.

Security Tokens

The biggest problem with ordinary tokens has now become blatantly obvious: Most investors thought they would get a chance to participate in the success of a company, like owning common stocks.

Story continues

But too many were taken to the cleaners. They got no ownership shares, no dividends, and no right to protest mismanagement. Not even protection against outright theft.

Now, however, the industry has a very viable solution: They're encoding into the software new features, including investor rights and protections. They're registering the tokens as if they were securities. And they're on their way to creating what could someday be digital common stocks.

So far, there are just a handful. But soon, they're bound to become the norm, replacing tokens in most cases.

Whether project issuers choose to build investor protections and real functionality into their tokens, or whether they choose to register their digital assets as securities is immaterial.

The bottom line is tokens are slowly evolving to become more useful, and some are even starting to emerge as viable investments.

So, stand by for our in-depth reviews of the most promising tokens. But for the most part, stick with our highest rated coins.