ESET researchers uncover an unusual cryptocurrency miner that comes bundled with pirated copies of VST software and uses virtualization software on both macOS and Windows to mine digital money on a Tiny Core Linux virtual machine. In another research effort, ESET experts discover apps that phish for login credentials to a cryptocurrency exchange and are capable of bypassing SMS-based two-factor authentication while circumventing Google’s recent SMS permissions restrictions. All this – and more – on WeLiveSecurity.