Detection of cryptocurrency miners

Hi @developerwil,

Wordfence scans already include checks for cryptocurrency-miners signatures.

However note that you can “add additional signatures” on the Wordfence –> Options page (we only treat those additional patterns as RegEx).

Hi @developerwil,

Please accept my apologies. I provided incorrect information.

I was discussing this topic with my colleagues and I misunderstood their answer.

Wordfence scans do not include checks for cryptocurrency-miners signatures at the moment as we don’t have evidence yet that they frequently occur on WordPress sites. If you have any malware samples proving otherwise, please send them in.

However you can still add additional signatures on the Wordfence –> Options page.

• This reply was modified 6 years, 6 months ago by wfyann. Reason: Additional info

You want evidence of CRYTO Miners: here you go. One of multiple results on GravityScan.

Medium Information Cryptominer Script Found (on /) Content Collapse
Title:
Cryptominer Script Found (on /)
Type:
Information
Severity:
Medium (5.0)
Product:
Content
Description:
Cryptominers use client browsers to mine for cryptocurrency and can have negative affects for users on the site. If you meant to add this script please ignore this result. If you did not intentionally include this script your site may have been hacked.
Found on https://————-.org/
src=”https://crypto\-loot\.com/lib/miner\.min\.js”