Botmasters have experimented with many different mechanisms for monetizing compromised user PCs over the years. The past 18 months, however, have seen the rise of a particularly direct method: printing money---Bitcoin, to be exact. This paper presents the first large-scale study of the methods, prevalence, and effectiveness of Bitcoin-mining botnets.