Crypto-Jacking Returns in Stealth Mode with 3500+ Websites Infected by Monero Miners

Experts from c/side have reported that over 3,500 websites have been infected with malicious scripts that secretly mine Monero cryptocurrency. This malware does not steal passwords or encrypt files; instead, it subtly uses a small portion of users' computing power without their consent to mine Monero. The mining script is designed to avoid suspicious CPU load, making it difficult to detect. Analysts indicate that crypto-jacking has reemerged in a more covert form. Previously, these scripts would cause CPU overloads and slow down devices, but now the main tactic is invisibility—mining slowly and steadily without raising suspicion.