30% of UK Firms Hit by Crypto Mining Malware in a Month: Survey
Almost a third of U.K. businesses said they had been hit by cryptocurrency mining malware within the previous month, according to new research.

Almost a third of U.K. businesses said they had been hit by cryptocurrency mining malware within the previous month, according to new research.
In a survey published by Citrix, almost 60 percent of responding companies further indicated they had found mining malware on their systems at some time in the past, with the vast majority of those instances (around 80 percent) being in the last six months.
As reported by ZDNet, the research also found that 60 percent of afflicted firms said less than 50 computers had been infected, while a tenth said over 100 machines had likely hosted illicit mining code.
Crypto-mining malware, which has ballooned in popularity among cybercriminals since last year, is hidden software that infects victims' devices, harnessing their processing power to mine cryptocurrencies. Mining code can also be concealed within websites to tap visitors' devices for the same purpose.
Recent reports have indicated that while, last year, ransomware was by far the most popular tool in the online bad actor's box, illicit miners have now taken over and represent around 32 percent of all malware attacks.
Uncovering mining malware is not always easy, either. According to the survey, while network monitoring software discovered the malware in over a third of cases, a similar number were reported by company employees, and 16 percent found the intrusions after devices noticeably slumped in performance.
While the figures emphasize the need for companies to put measures in place to counter the rapidly growing threat of malicious miners, the research suggests that a fifth of firms still have not done so.
Recently, researchers at Kaspersky Labs recently reported that a new form of cryptojacking malware has been spreading across corporate networks in nations including India, Brazil, Colombia and Turkey. The miner "is capable of stealthily establishing itself in a system and spreading across large corporate networks infecting both workstations and servers," Kaspersky said.
Another attack reported this month by security firm Trustwave was found to target MicroTik routers and led to the installation of the Coinhive mining software on over 17,000 devices, largely in Brazil.
Malware image via Shutterstock
More For You
Protocol Research: GoPlus Security

What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
XRP Faces Downside Risk as Social Sentiment Turns Wildly Negative

The turn in crowd mood comes after a two-month slide of roughly 31%, leaving the token vulnerable to further downside if risk appetite weakens across majors.
What to know:
- XRP's price approached the $2 mark as social sentiment around the token turned sharply negative, according to Santiment data.
- The token has experienced a 31% decline over two months, making it vulnerable to further losses if market risk appetite weakens.
- Santiment's sentiment model indicates XRP is in a 'fear zone,' where negative commentary significantly outweighs positive talk, potentially influencing market positioning.











