Cryptojacking refers to the practice of attackers harnessing the processing power of computers they don’t own to mine for cryptocurrency, such as Bitcoin or Monero. Cryptojacking’s popularity soared when cryptocurrencies hit their all-time highs in late 2017 and early 2018, and attackers adapted the malware used for these activities to go after mobile devices, cloud infrastrucuture, Internet of Things devices, and even operational technology (OT). In one particularly notable incident, cybersecurity vendor Radiflow discovered cryptojacking occuring against the SCADA network of an unnamed wastewater utility (previously reported on by WaterISAC here). While the initial cryptojacking gold rush has subsided somewhat, hackers can still make money off of cryptojacking because there's such minimal overhead to run the campaigns. And cybersecurity experts warn that cryptojacking will continue to evolve and may pose greater threats to critical infrastructure. “With the price of cryptocurrency decreasing we saw this kind of fade a bit, but it didn’t mean cryptojacking itself disappeared. It really matured," says Jérôme Segura, lead malware intelligence analyst at the network defense firm Malwarebytes. "The danger is if you have a cryptominer running in critical infrastructure where computers are used for specific tasks and to schedule tasks it could potentially create instability and crashes and that in turn could affect service." Wired.