Abstract:Recent statistics indicate a continuous rise in cryptojacking malware. This malware covertly exploits users' device resources to mine cryptocurrencies, such as Bitcoin, without their knowledge or consent. Cryptocurrency mining involves participants competing to generate a unique hash, with successful miners earning cryptocurrency tokens as rewards. As the difficulty of mining new cryptocurrencies increases, greater computational power and resources are required. Unfortunately, the growing popularity of cryptocurrencies has led to a significant increase in cryptojacking malware. Compounding this issue is the lack of adequate, practical solutions to combat this threat. Current shortcomings include a limited number of related studies, particularly in host-based cryptojacking, a scarcity of recent research, reliance on small or outdated datasets, and a shallow understanding of the behavior and characteristics of cryptojacking malware. This paper aims to address these gaps by introducing a holistic, intelligent cryptojacking malware detection system that: 1) provides a detailed analysis of the lifecycle of both host-based and web-based cryptojacking malware; 2) conducts a critical comparison of existing solutions, highlighting their weaknesses; 3) applies deep static analysis to identify key indicators crucial for cryptojacking analysis; 4) executes thorough dynamic analysis to demonstrate the real-world impact of cryptojacking; 5) utilizes a new, large, and robust cryptojacking dataset (CJDS) with over 100,000 samples, where the details of constructing this dataset are provided, (f) develops vision-based predictive models using 23 convolutional neural network (CNN) algorithms, extensively evaluated with comprehensive metrics; and 6) integrates the best-performing model to bulid a highly efficient cryptojacking detection system with an accuracy of 99%. This research offers valuable insights into the characteristics and consequences of cryptojacking, paving the way for further advancements in cybersecurity. It aims to protect digital environments from unauthorized resource exploitation and enhance the security of cryptocurrency-based systems.

Dissecting the Infrastructure Used in Web-based Cryptojacking: A Measurement Perspective

CapJack: Capture In-Browser Crypto-jacking by Deep Capsule Network Through Behavioral Analysis

Analyzing In-browser Cryptojacking

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World.

End-to-End Analysis of In-Browser Cryptojacking

A first look at browser-based Cryptojacking

A Holistic Intelligent Cryptojacking Malware Detection System

Delay-CJ: A novel cryptojacking covert attack method based on delayed strategy and its detection

CoinPolice:Detecting Hidden Cryptojacking Attacks with Neural Networks

CryptojackingTrap: An Evasion Resilient Nature-Inspired Algorithm to Detect Cryptojacking Malware

MinerGate: A Novel Generic and Accurate Defense Solution Against Web Based Cryptocurrency Mining Attacks

On Detecting Cryptojacking on Websites: Revisiting the Use of Classifiers

A First Look at the Crypto-Mining Malware Ecosystem: A Decade of Unrestricted Wealth

Cryptic Bytes: WebAssembly Obfuscation for Evading Cryptojacking Detection

cryptoRAN: A review on cryptojacking and ransomware attacks w.r.t. banking industry -- threats, challenges, & problems

Behavior-Based Detection of GPU Cryptojacking

Ransomware Attacks in Cyber-Physical Systems: Countermeasure of Attack Vectors Through Automated Web Defenses

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

Detecting and forecasting cryptojacking attack trends in Internet of Things and wireless sensor networks devices

Miners in the Cloud: Measuring and Analyzing Cryptocurrency Mining in Public Clouds

Demystifying Cryptocurrency Mining Attacks: A Semi-supervised Learning Approach Based on Digital Forensics and Dynamic Network Characteristics