Norton 360 Antivirus Bundles Integrated Cryptominer

Norton 360, a prominent antivirus suite, has introduced a built-in cryptocurrency mining feature called 'Norton Crypto.' While the parent company, NortonLifeLock Inc., maintains that the feature is strictly opt-in and designed for user profit, the integration of mining software into a security product has sparked a backlash from users and researchers. Many report that the component is installed by default and is difficult to remove without disabling internal security protections.

Technically, the miner (NCrypt.exe) targets Ethereum (ETH) and activates when the system is idle, provided the hardware meets high-performance GPU requirements. Norton collects a 15% commission on all mined currency, and users are responsible for significant transaction (gas) fees, which may exceed the actual earnings for average users. This move blurs the line between security software and potentially unwanted programs (PUPs).

For organizations, this development highlights a shift in software monetization that increases the attack surface and complicates the baseline of 'normal' behavior. The presence of legitimate, signed security software performing cryptomining can mask actual malicious cryptojacking attempts and introduces financial and environmental costs through increased power consumption and hardware wear.