online crypto mining extensions

[ridertiger]

So, a Chrome extension I added turned out to be mining using hanstracker or something. Meanwhile, I used my Lastpass master password to get into Last pass. Any ideas? Should I do something about it?

[bob123]

If you have 'just' entered your lastpass master password the extension should NOT be able to grab any passwords inside of it.
It should also NOT be able to upload files from your harddrive (e.g. lastpass database file).

Generally such 'mining malware' does not steal any passwords/sensitive information. They just 'steal' computational power.
This does NOT mean that a mining malware which also does steal sensitive information doesn't exist.. it is just not that common.

Should I do something about it?

Remove the extension. I hope you already have done this.
To be on the safe side, you might check your system for malware.

And you should definitely be more cautios when installing browser add-ons (or any other software).

[burakdat]

Could you share more details on your online crypto mining extensions? i am a little bit interested into it and hopeful that i could be able to earn also in mining. This is a good opportunity in cryptocurrency aside from investing directly to crypto and joining bounty campaign. Mining could be one of a good source of income. I just need to consider though the expenses.

[ridertiger]

Yeah, that's what I thought, so it was the first thing I did, I removed the darn thing. It was a flash video downloader for faceinhole website. They make the videos with no simple way to download it. I could always F12 chrome and find it there but what is this, 1995?
Anyways, I just typed my password to lastpass so I should be fine. The scan did not show anything either.
Thanks for the help though.

If you have 'just' entered your lastpass master password the extension should NOT be able to grab any passwords inside of it.
It should also NOT be able to upload files from your harddrive (e.g. lastpass database file).

Generally such 'mining malware' does not steal any passwords/sensitive information. They just 'steal' computational power.
This does NOT mean that a mining malware which also does steal sensitive information doesn't exist.. it is just not that common.

Should I do something about it?

Remove the extension. I hope you already have done this.
To be on the safe side, you might check your system for malware.

And you should definitely be more cautios when installing browser add-ons (or any other software).