An adware bundle has started to create a Windows autorun that automatically launches Chrome so that it connects to a in-browser mining page. To make matters worse, it does it in a way that makes it so Chrome is invisible. […]

https://www.bleepingcomputer.com/news/security/adware-launches-in-browser-mining-sites-pretending-to-be-cloudflare/