virus logo Virus

JS/CoinMiner.BAFK!tr

description-logoAnalysis
JS/CoinMiner.BAFK!tr is a specific detection for an encoded JS CoinMiner.

  • This malware's intention is to coin mine, as similar to other JS CoinMiner it utilizes WASM library. CoinMiners are programs that utilizes the hosts CPU power to participate in a process of verifying transactions that might be related to cryptocurrency.

  • There is a discussion on The Growing Trend of Coin Miner JavaScript Infection regarding a similar related malware CoinHive.


    • recommended-action-logoRecommended Action

    • Make sure that your FortiGate/FortiClient system is using the latest AV database.
    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Telemetry logoTelemetry

    Detection Availability

    FortiClient
    Extreme
    FortiMail
    Extreme
    FortiSandbox
    Extreme
    FortiWeb
    Extreme
    Web Application Firewall
    Extreme
    FortiIsolator
    Extreme
    FortiDeceptor
    Extreme
    FortiEDR

    Version Updates

    Date Version Detail
    2019-03-26 67.33800 Sig Updated
    ID 7670203
    Released Mar 22, 2018
    Description
    Updated    		 Mar 22, 2018
    Aliases Coinminer_MALXMR.TIBAFK-JS, JS/CoinMiner-AA, Trojan.JS.Agent.SEX
    Platform Profile Java Script