Security Report: At Least 3,500 Websites Compromised by Maliciously Injected Hidden Monero Mining Scripts

According to a report by Jinse Finance, citing Decrypt, researchers from cybersecurity firm c/side have found that malicious Monero (XMR) mining software has targeted multiple websites, signaling a resurgence of cryptojacking attacks. At least 3,500 websites are currently running maliciously injected, hidden Monero mining scripts. Unlike traditional cryptojacking, these malicious programs avoid obvious signs by limiting CPU usage and concealing traffic within WebSocket streams. Hackers are employing a "keep a low profile, mine slowly" strategy, targeting unpatched websites and e-commerce servers.