NES site using 100% CPU - Problem found, BITCOIN MINING SCRIPT on NES Content

[not new guy]

Count me in for the story of WTF happened.

 

[Prepper]

I use the Brave browser with Shield Down for NES and got high CPU usage. When I put Shields Up with script blocking, it stops.

Brave is a great security browser by the way

Yes this 100%. I use Brave on both PC and phones. Everything runs smooth amd fast.

Sent from my RS988 using Tapatalk

 

[dhuze]

I got it here and on another forum I was on this morning

 

[jhblaze1]

I wish people that pulled shit like this could be publicly executed.

 

[Len-2A Training]

Microsoft Edge and Win 10, uses 100% of CPU. Not as bad with IE, but noticeable memory hog.

 

[amm5061]

Chrome settings -> advanced -> content settings -> javascript allows blocking of Javascript by site. Block coin-hive.com, not northeastshooters.com, or you will also disable features like embedded youtube videos in posts.

Yup, that's also a good solution for anyone without adblock plus installed. Should also replicate across instances of Chrome on other machines if you are signed in to Chrome.

 

[EMTDAD]

Yup, that's also a good solution for anyone without adblock plus installed. Should also replicate across instances of Chrome on other machines if you are signed in to Chrome.

the adblock solution worked for me... the javascript blocking solution did not for some reason..

 

[jhblaze1]

Chrome settings -> advanced -> content settings -> javascript allows blocking of Javascript by site. Block coin-hive.com, not northeastshooters.com, or you will also disable features like embedded youtube videos in posts.

worked for a minute but I'm back at 100% again.

 

[CoastieRon]

I'm running adblock, and I'm running at 100% as well. So in other words, someone is making money off my browsing.

 

[FalArAk]

Running adblock and Chrome,tried Rob's suggestion..worked for a minute and back to 100%

How did you guys discover this anyway,I didn't even notice it.

And why is it on this site ?

 

[Noreaster]

Running adblock and Chrome,tried Rob's suggestion..worked for a minute and back to 100%

How did you guys discover this anyway,I didn't even notice it.

And why is it on this site ?

Was browsing NES during the pats game, Laptop was getting super hot and fan was running at a speed i have never heard it run before. Made me start searching.

 

[JayMcB]

the noscript add-on mentioned previously works like a charm. list coin-hive.com as untrusted and you're good to go

 

[Snora]

I'm running adblock, and I'm running at 100% as well. So in other words, someone is making money off my browsing.

Gotta paste the js script into the "add your own filter" option in Adblock Plus if you want to stop it:

This is the address to block:
https://coin-hive.com/lib/coinhive.min.js

 

[LoginName]

I was wondering why my Kaspersky AV was going bonkers...

This was on the NES main page, normally I register 5-15 blocked attempts (or there abouts), on other websites.

 

[xero2099]

Running adblock and Chrome,tried Rob's suggestion..worked for a minute and back to 100%

How did you guys discover this anyway,I didn't even notice it.

And why is it on this site ?

first did the chrome settings worked briefly then ramped up I aded the site to ad block plus everything is working now

 

[CoastieRon]

I don't have plus. Crap. Oh well.

 

[FalArAk]

I have Adblock and it said " Failed, not a valid filters list" when I added the script...Do I need the Plus version of Adblock ? Fergit it,just seen Plus was Firefox which I rarely use.

Also added the No Scripts addon,and it seems to be keeping it in check.

Is this something that a hacker can do,or does something like this get executed from someone like a server host etc ?

 

[JayMcB]

I don't have plus. Crap. Oh well.

https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/

 

[CoastieRon]

https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/

I use the chrome

- - - Updated - - -

https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/

I use the chrome

 

[CoastieRon]

Fixed, thank yoU!

 

[Lcstyle]

I can speculate that one of the vendors on the ad rotation network that NES subscribes to decided to go rogue and insert the miner in an ad unbeknownst to the ad network and to NES. That's why I usually browse with no javascript enabled anywhere. JS is a huge gaping security hole into your computer. Just be lucky that it was a bitcoin miner this time and not ransomware. This browser miner seems to be making the rounds lately:https://yro.slashdot.org/story/17/09/16/1623255/can-the-pirate-bay-replace-ads-with-a-bitcoin-minerIf they were smart they would have limited the miner to a fraction of cpu usage so that people wouldn't notice. Pegging the cpu is a surefire way to get noticed. Amateurs.

 

[Noreaster]

I can speculate that one of the vendors on the ad rotation network that NES subscribes to decided to go rogue and insert the miner in an ad unbeknownst to the ad network and to NES. That's why I usually browse with no javascript enabled anywhere. JS is a huge gaping security hole into your computer. Just be lucky that it was a bitcoin miner this time and not ransomware. This browser miner seems to be making the rounds lately:https://yro.slashdot.org/story/17/09/16/1623255/can-the-pirate-bay-replace-ads-with-a-bitcoin-minerIf they were smart they would have limited the miner to a fraction of cpu usage so that people wouldn't notice. Pegging the cpu is a surefire way to get noticed. Amateurs.

My web developer skills suck, but it looks like its right in the VBulletin file, not the ad content.

http://www.northeastshooters.com/vbulletin/content/
Line: 101

 

[Lcstyle]

My web developer skills suck, but it looks like its right in the VBulletin file, not the ad content.http://www.northeastshooters.com/vbulletin/content/Line: 101

Is NES trying to replace ad's with revenue generated by bitcoin mining, or did they get haxx?

 

[Garys]

I've been using Brave on my phone with good results, but thought that the Windows version still needed a bit of work. I downloaded and installed it after reading this thread. I'm using it now and my CPU usage is down where it should be. I figured out how to import my bookmarks from Pale Moon, and just have to change a few settings to get it to work like that browser does. I have to see if I can increase the font size, but other than that, I'm in good shape.

I use the Brave browser with Shield Down for NES and got high CPU usage. When I put Shields Up with script blocking, it stops.

Brave is a great security browser by the way

 

[Len-2A Training]

I've been using Brave on my phone with good results, but thought that the Windows version still needed a bit of work. I downloaded and installed it after reading this thread. I'm using it now and my CPU usage is down where it should be. I figured out how to import my bookmarks from Pale Moon, and just have to change a few settings to get it to work like that browser does. I have to see if I can increase the font size, but other than that, I'm in good shape.

Increase font by using Control +, similarly decrease it by using Control -

Works with every browser that I've tried as well as Office applications.

 

[Billsail]

I was wondering why my fan was running on high, non stop. Gun control proponent trying to fry our computers??? I guess I'll get off NES, and try back later.

 

[Admin]

Should be good to go.

 

[CoastieRon]

Must have hit over the past few days, my data usage on my phone skyrocketed over the last 2 days. I just got the 10% warning, and I never get that (and only have a 3gb plan)

 

[Rob Boudrie]

Increase font by using Control +, similarly decrease it by using Control -

Works with every browser that I've tried as well as Office applications.

And control-0 (zero) to reset it to the default.

 

[EMTDAD]

I notice that the entire header bar is gone now on the "new posts" page.