MalwarePublished 4 Jun 2026

Hola Browser for Windows compromised to deliver cryptominer

Source Bleeping Computer

windows

Description

The Windows version of the Hola Browser has been compromised in a supply chain attack that delivered an undeclared executable identified by researchers as a cryptocurrency miner. [...]

Impact

The compromise resulted in the installation of a cryptocurrency miner on affected Windows systems, which could degrade system performance and increase power consumption. There is no evidence that user data was accessed, stolen, or otherwise compromised. The impact is limited to unauthorized resource usage on infected machines. Approximately 0.1% of Hola Browser users were affected.

Defensive guidance

Hola has completely rebuilt its distribution pipeline, implemented advanced code-signing verification, and introduced tighter access controls and continuous monitoring to ensure only certified and signed components are delivered. Users should update to the latest version of Hola Browser once available and verify their installations for unauthorized executables. Since this is a supply chain compromise, replacing the affected software with a clean, updated version from the vendor is the primary remediation step. Patch status is not explicitly confirmed; check Hola's official advisory for updates.

References

bleepingcomputer.com/news/security/hola-browser-for-windows-compromised-to-deliver-cryptominer/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 4 Jun 2026, 21:33 UTC

References

Community reviews

Related threats