Evolving trends in cryptomining malware: a systematic literature review

Area of Science:

• Cybersecurity
• Computer Science
• Digital Forensics

Background:

• Cryptojacking involves the covert utilization of victim resources for unauthorized cryptocurrency mining.
• This practice has escalated into a significant cyber threat since the advent of Bitcoin.
• Cryptomining malware hijacks computational power, degrading performance without user consent.

Purpose of the Study:

• To systematically review the literature on cryptojacking malware.
• To trace the evolution, dissemination, and detection trends of cryptojacking.
• To identify security recommendations and future developments in combating cryptojacking.

Main Methods:

• Systematic literature review of 119 articles.
• Analysis of cryptojacking evolution, trends, and impact.
• Identification and discussion of detection methods and security recommendations.

Main Results:

• The cryptojacking threat landscape expanded significantly around 2017 and continues to grow.
• The threat impacts individual devices (IoT, mobile, cloud) and critical infrastructure.
• Effective detection methods include network traffic analysis, CPU monitoring, and machine learning.
• Security recommendations encompass browser extensions, patch management, and network blocking.

Conclusions:

• A unified, multi-stakeholder security strategy is crucial to mitigate the pervasive cryptojacking threat.
• Continuous adaptation and vigilance are necessary to counter evolving cryptojacking techniques.
• Addressing cryptojacking requires a comprehensive approach involving technical and policy measures.