Backdoor.BitCoinMiner
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Backdoor.BitCoinMiner is Malwarebytes’ detection name for a few backdoors that install crypto-currency miners on the affected machine without the users’ consent.
Type of infection
The dropping or downloading of a backdoor is often the second stage in an attack, where the first stage is the infiltration of the Trojan dropper or downloader, and the final stage is gaining full control of the affected system. In many cases, a backdoor is a payload as the attacker can build out his control once it is functioning. Infections detected as Backdoor.BitCoinMiner are usually downloaded by the users themselves, but under false pretences.
Malicious behavior
Crypto-currency miners use a lot of resources to optimize the earning of crypto-coins, so users may experience slow computers.
Aftermath
Besides slowing down your machine, running at peek level for long times may cause damage to your machine and raise electricity bills.
Protection
Malwarebytes blocks Backdoor.BitCoinMiner
Business remediation
How to remove Backdoor.BitCoinMiner with the Malwarebytes Nebula console
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
On the Quarantine page you can see which threats were quarantined and restore them if necessary.
Home remediation
Malwarebytes can detect and remove Backdoor.BitCoinMiner without further user interaction.