Netskope Threat Labs

CryptoTab

AV

CryptoTab is a Chromium based browser that mines cryptocurrency in the background using the resources of the machine running it. It spreads through referral schemes that promise earnings for recruiting other users, and security products flag it because it consumes system resources and changes settings without the transparency users expect from mainstream browsers.

First seen
April 2022
Last seen
August 2026
Alert Name
Application.Deceptor.CryptoTab.A
Application.Miner.CryptoTab.A
Application.Miner.CryptoTab.B