CoinHive-blocker icon indicating copy to clipboard operation
CoinHive-blocker copied to clipboard

Coin-Hive analysis

Open KBPsystem777 opened this issue 7 years ago • 3 comments

Hi there! What particular analysis is the Coin-Hive doing after clicking the "High CPU usage. Click, for us to see what's happening"? Thanks in advance

KBPsystem777 avatar May 17 '18 19:05 KBPsystem777

Hi, @KBPsystem777 . There currently isn't much that happens when the user clicks the notification. It takes the url of the current tab open and posts it to this spreadsheet: Potential Miners .

chrome.notifications.onClicked.addListener(function(res){ if(res == "HIGHCPU"){ chrome.notifications.clear('HIGHCPU') console.log('Reported: '+site) var xhr = new XMLHttpRequest(); xhr.open('POST', 'https://docs.google.com/forms/d/1cB1urxRqau67pWoN5s1oSfUyi9t0G5T3dMT_txc-o3Q/formResponse', true); xhr.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); var data = 'entry.2146017821='+site; xhr.send(data); } })

My idea was to go through each url manually, however this takes too much time now that the amount of users has increased. I am currently working on a better solution using Puppeteer and headless chrome, where I will automatically scrape the website for miners.

I hope this answered your question :)

AMoldskred avatar May 18 '18 16:05 AMoldskred

@adreas0607 that's great! Also one thing I noticed is that the notification is still popping even though I don't have a browser open. It usually happens when I'm overloading the CPU while gaming. :)

KBPsystem777 avatar May 22 '18 09:05 KBPsystem777

@KBPsystem777 , what I recommend is to open the pop-up by clicking the icon in the top right of your browser and disable the notifications by clicking the little checkbox. That is if you don't want to get notifications, you can easily turn it on and off whenever you need to.

AMoldskred avatar May 22 '18 18:05 AMoldskred