From 4cebd35c2c900df6ed0144f2703bacc2941a305a Mon Sep 17 00:00:00 2001
From: jvoisin <jvoisin@users.noreply.github.com>
Date: Sat, 10 Mar 2018 05:30:17 +0100
Subject: [PATCH] Improve a bit the cryptoloot detection (#2150)

Based on [this article](https://badpackets.net/how-to-find-cryptojacking-malware/)
---
 src/apps.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/apps.json b/src/apps.json
index 66116810b..46f1b1ffb 100644
--- a/src/apps.json
+++ b/src/apps.json
@@ -2122,7 +2122,12 @@
         "CryptoLoot": "",
         "CRLT.CONFIG.ASMJS_NAME": ""
       },
-      "script": "^(?:https):?//crypto-loot\\.com/lib/",
+      "script": [
+        "^(?:https):?//crypto-loot\\.com/lib/",
+        "^(?:https):?//webmine\\.pro/",
+        "^(?:https):?//cryptoloot\\.pro/",
+        "/crlt\\.js\\;confidence:75%"
+      ],
       "icon": "Crypto-Loot.png",
       "website": "https://crypto-loot.com/"
     },