Top Tweets for #Coinimp
💥Surprisingly, mining is still alive. The end!🧱
🥲Oh, no, if it’s also in the victim’s browser, then you can surprise me.
🗿It seemed that with the death of #coinhive the story ended But no....
Are you ready?! 🥁
#CoinIMP 🎊Bada-boom 🎊😅
🤖As useless as it is harmful
Links↘️
aftertherain[.]kr/main/index.php
www.hostingcloud[.]racing/L2drCvN6.wasm
www.hostingcloud[.]racing/tWbJ.js
www.coinimp[.]com
⛏️ #CoinIMP: MintMe JavaScript mining in your browser
🌕 The #MintMe cryptocurrency, with the #Lyra2 webchain algorithm, is mined using a compiled #WebAssembly module controlled via #JavaScript code that connects to the mining pool by a #WebSocket
Sequence of Events:
⏩ Browse HTML page → Load JS Miner Worker → Load WASM Miner Binary → WebSocket
📥 Components loaded by the miner:
💾️ Obfuscated JS wrapper code (~ 130 kb)
💾 Obfuscated JS miner launcher (~ 3 kb)
💾️ XORed .wasm module (~ 25 kb)
🛠️ More Details:
Miner configuration is hard-coded inside the JavaScript body:
[LIB_URL, ASMJS_NAME, WEBSOCKET_SHARDS_W, OUR_SITEKEYS, MINER_HOST etc]
XORed .wasm module gets loaded from an external source:
[www.hostingcloud[.]racing/L2drCvN6.wasm]
JS wrapper communicates via an encrypted XOR masked WebSocket with the mining pool:
[s11.hostcontent[.]live/sv8HPzAu]
💡 A similar scheme was previously observed in #CoinHive. Replacing #cryptonight-webchain with #lyra2-webchain is a step towards reducing the hash rate difference between high-end and low-end processors at the cost of memory usage.
Examples of infected websites:
➡️ https://t.co/QxuCtC0WGc
➡️ https://t.co/jZuje9hyGI
Check suspicious links with #ANYRUN! 🔎
![anyrun_app's tweet photo. ⛏️ #CoinIMP: MintMe JavaScript mining in your browser
🌕 The #MintMe cryptocurrency, with the #Lyra2 webchain algorithm, is mined using a compiled #WebAssembly module controlled via #JavaScript code that connects to the mining pool by a #WebSocket
Sequence of Events:
⏩ Browse HTML page → Load JS Miner Worker → Load WASM Miner Binary → WebSocket
📥 Components loaded by the miner:
💾️ Obfuscated JS wrapper code (~ 130 kb)
💾 Obfuscated JS miner launcher (~ 3 kb)
💾️ XORed .wasm module (~ 25 kb)
🛠️ More Details:
Miner configuration is hard-coded inside the JavaScript body:
[LIB_URL, ASMJS_NAME, WEBSOCKET_SHARDS_W, OUR_SITEKEYS, MINER_HOST etc]
XORed .wasm module gets loaded from an external source:
[www.hostingcloud[.]racing/L2drCvN6.wasm]
JS wrapper communicates via an encrypted XOR masked WebSocket with the mining pool:
[s11.hostcontent[.]live/sv8HPzAu]
💡 A similar scheme was previously observed in #CoinHive. Replacing #cryptonight-webchain with #lyra2-webchain is a step towards reducing the hash rate difference between high-end and low-end processors at the cost of memory usage.
Examples of infected websites:
➡️ https://t.co/QxuCtC0WGc
➡️ https://t.co/jZuje9hyGI
Check suspicious links with #ANYRUN! 🔎](https://pbs.twimg.com/media/GOBZgT7WEAA-dVI.jpg)
⛏️ #CoinIMP: MintMe JavaScript mining in your browser
🌕 The #MintMe cryptocurrency, with the #Lyra2 webchain algorithm, is mined using a compiled #WebAssembly module controlled via #JavaScript code that connects to the mining pool by a #WebSocket
Sequence of Events:
⏩ Browse HTML page → Load JS Miner Worker → Load WASM Miner Binary → WebSocket
📥 Components loaded by the miner:
💾️ Obfuscated JS wrapper code (~ 130 kb)
💾 Obfuscated JS miner launcher (~ 3 kb)
💾️ XORed .wasm module (~ 25 kb)
🛠️ More Details:
Miner configuration is hard-coded inside the JavaScript body:
[LIB_URL, ASMJS_NAME, WEBSOCKET_SHARDS_W, OUR_SITEKEYS, MINER_HOST etc]
XORed .wasm module gets loaded from an external source:
[www.hostingcloud[.]racing/L2drCvN6.wasm]
JS wrapper communicates via an encrypted XOR masked WebSocket with the mining pool:
[s11.hostcontent[.]live/sv8HPzAu]
💡 A similar scheme was previously observed in #CoinHive. Replacing #cryptonight-webchain with #lyra2-webchain is a step towards reducing the hash rate difference between high-end and low-end processors at the cost of memory usage.
Examples of infected websites:
➡️ https://t.co/QxuCtC0WGc
➡️ https://t.co/jZuje9hyGI
Check suspicious links with #ANYRUN! 🔎
CoinIMP release notes. v1.3.6 to v1.3.8
Read more at
https://t.co/U8nSnOUXHj
#CoinIMP #release #Update #MINTMEcoin
We all want to play for the #winning team, don’t we? #CoinIMP Team already delivered a #successful #project that is currently giving great results. Be part of a revolutionary #idea playing for the winning team once again. #javascript #Mining #Web #Airdrop
Webchain forked. Read more here https://t.co/W5jlE9KL7t $Web $IMP #Webchain #CoinIMP #Crypto #cryptocurrency
IMP TOKEN LISTED! https://t.co/XVyQo5GpP6
Thank you @CoinDelite
#Token #ICO #CoinIMP #JavaScript #Innovation #Mining #Advertising
Starting the week with more good news! 🔥 IMP is now listed at https://t.co/FiVwrhlhPX give it a look! #HappyMonday #ICO #IMP #Token #CoinIMP #Mining #Ads #Alternative #Blockchain #Coins
Sharing great news! We've been listed on https://t.co/braHwR1owd Check it out! #TokenSale #Airdrop #ICO #CoinIMP #Revolution
#CoinIMP is already one of the most popular #JavaScript #mining services in the market and now we are taking the first position as the very #best #alternative to #Coinhive #mining service.
#CoinIMP ITO promises to revolutionize web advertising. Check out the PR below Regarding their JavaScript #Monero Web #Miner. #Blockchain
Mentions: @CoinIMP
https://t.co/bZYQ4ow4JQ
In #CoinIMP We have started paving the way towards true web #sustainability. We are heading up the #revolution in the #advertising world. Let’s walk through this path together https://t.co/HMoEZ9jQQb
Happy week start, everyone!
#CoinIMP ITO promises to revolutionize web advertising. Check out the PR below Regarding their JavaScript #Monero Web #Miner. #Blockchain
Mentions: @CoinIMP
https://t.co/bZYQ4ow4JQ
Generating big ideas isn’t the same thing as being able to bring them to life in a valuable way. #CoinIMP is in a process of #evolution in order to make this big dream come into realization! https://t.co/ad6W5VyNVr
Last Seen Hashtags on Sotwe
NOlimit filter:videos
Seen from India
pinayleaks
Seen from Denmark
rape
Seen from Brazil
nolimit ()
Seen from Turkey
HeavenConfirms
Seen from United States
monkeyappwinsFull
Seen from United States
orochimaru
Seen from Netherlands
nolimit teenage teenagegirls filter:native_video
Seen from India
callu3u
Seen from Thailand
beautiful
Seen from Brazil
Most Popular Users
Elon Musk 
@elonmusk
240.6M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
110.6M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.6M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
90.9M followers
KATY PERRY
@katyperry
87.6M followers
Taylor Swift
@taylorswift13
81.5M followers
Lady Gaga
@ladygaga
73M followers
Virat Kohli
@imvkohli
69.9M followers
Kim Kardashian
@kimkardashian
69.8M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
63.9M followers
Neymar Jr
@neymarjr
62.6M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
X
@x
60.8M followers
Selena Gomez
@selenagomez
60.7M followers