Hola Browser for Windows compromised to deliver cryptominer

The Windows version of Hola Browser was compromised in a supply chain attack that resulted in the delivery of malicious code to end users. Researchers identified an undeclared executable embedded in the compromised browser distribution that functioned as a cryptocurrency miner.

The attack represents a direct compromise of the browser's distribution or update infrastructure, allowing attackers to inject malicious payloads into legitimate software downloads. Users who installed or updated the affected Windows version of Hola Browser would have received the cryptominer without their knowledge or consent.

This incident demonstrates the risk of supply chain compromise at the application level, where attackers gain control over software distribution channels to deliver secondary payloads to a broad user base.