Crypto-jacking is a covert cyber-attack where hackers hijack a user's device to mine cryptocurrency without permission. This is done by injecting a hidden script into websites or software, draining device resources and causing performance issues for the victim, while the attacker reaps the benefits.