Hola Browser for Windows was compromised through its software distribution or update mechanism, resulting in a malicious cryptominer being silently installed on user systems as a persistent Windows service. The attacker also disabled Windows Defender exclusions to avoid detection, leaving affected machines exposed to ongoing resource abuse and potential further compromise. Organizations and individuals running Hola Browser on Windows should treat any installed instance as potentially compromised and take immediate action to remove it.