AnalysisPublished 22 Jun 2026

How Hola Browser was weaponized to spread a Monero miner | Kaspersky official blog

Source Kaspersky Security Blog

windows

Description

A supply chain attack left some Windows users with a Monero crypto miner bundled right into their Hola Browser installation. Here is a breakdown of the incident.

Impact

Affected users unknowingly had their system resources hijacked to mine Monero cryptocurrency, leading to potential performance degradation, increased electricity consumption, and reduced hardware lifespan. The attack did not involve theft of cryptocurrency or direct data compromise but resulted in unauthorized use of computing resources. The infection was limited to approximately 0.1% of Hola Browser Windows users running version 1.251.91.0.

Defensive guidance

Hola has addressed the supply chain breach by securing its update distribution pipeline to ensure only approved, digitally signed software is delivered. Users should immediately update Hola Browser to the latest version to avoid infection. Running updated antivirus solutions capable of detecting such threats is recommended. Since the vendor has confirmed remediation efforts, no additional urgent actions are required beyond updating the software.

References

kaspersky.com/blog/hola-browser-supply-chain-attack-cryptominer/55999/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 22 Jun 2026, 17:07 UTC

References

Community reviews

Related threats