Hola Browser Infected Windows Users Through Official Updates

What Just Happened

Hola Browser, a free VPN and browser service used by millions worldwide, delivered cryptocurrency mining malware to Windows users through its official update channel. This wasn't a traditional hack where criminals broke in. The attackers compromised Hola's software supply chain, meaning the malicious code came through the same trusted update system families rely on to keep their software secure.

The Details

Supply chain attacks are especially dangerous because they exploit trust. When your computer says "Hola Browser has an update available," you expect that update to improve the software. In this case, the update installed a cryptominer instead.

Cryptominers are programs that secretly use your computer's processing power to generate cryptocurrency for attackers. Your computer runs slower. Your electricity bill goes up. Your device gets hot and wears out faster. Meanwhile, criminals profit from stealing your computer's resources.

What makes this attack concerning is that it looked completely legitimate. The malware came through Hola's official update mechanism, signed with proper certificates. Your antivirus software likely saw nothing wrong because the update appeared authentic. This is why supply chain attacks are so effective and why they're becoming more common.

Who Is Affected

Anyone who uses Hola Browser on Windows computers should take immediate action. This includes families who installed Hola for its free VPN service or faster video streaming. Many parents installed Hola without realizing the security risks it already posed (the company has faced previous controversies about selling user bandwidth).

Even if you installed Hola months ago, you're potentially affected if automatic updates were enabled. The compromised update could have installed silently in the background while your family used the computer normally.

What You Should Do Right Now

1. Uninstall Hola Browser immediately from all Windows computers in your home. Go to Settings > Apps > Apps & Features, find Hola, and select Uninstall. Don't just close the program.

The Bigger Picture

Supply chain attacks are increasing because they're incredibly effective. Criminals don't need to trick you into clicking a suspicious link. They compromise the software you already trust. We saw this with SolarWinds affecting major corporations and government agencies. Now we're seeing it affect consumer software like browsers.

The lesson isn't to stop updating software (updates remain critical for security). The lesson is to carefully evaluate what software you trust and to stay informed about compromises when they happen. Free software with unclear business models carries additional risk.

How GetCyberRight Can Help

Our Cyber Threat Radar tool tracks exactly these kinds of supply chain threats and software compromises in real time. Instead of discovering weeks later that software you trusted was compromised, you get timely alerts about threats affecting everyday tools your family actually uses. We translate technical security incidents into clear actions you can take to protect your household, without requiring a cybersecurity degree to understand what's happening.