Hack Forums
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock (/showthread.php?tid=6304401)



3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - Stanley - Jul 29, 2025

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock

A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive. 
Although the service has since shuttered after browser makers took steps to ban miner-related apps and add-ons, researchers from the c/side said they found evidence of a stealthy

https://thehackernews.com/2025/07/3500-websites-hijacked-to-secretly-mine.html


RE: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - The Pact - Sep 26, 2025

Unlike older brute-force cryptojacking, this campaign prioritizes stealth. Apparently, it has no obvious CPU spikes makes no visible network calls. And no alerts from basic security tools. Users unknowingly mine crypto while browsing, turning their devices into silent profit engines

We now need to use NoMiner or uBlock Origin to try and stop this.
Keeping Content Management System platforms updated is important because apparently, they target these helpful platforms. ☹️


RE: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - Yanix - Sep 26, 2025

Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.


RE: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - oRequiem - Oct 3, 2025

(Sep 26, 2025 01:27 AM)Yanix Wrote:  Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.

They technically could, I'm surprised we haven't seen them inject anything more brutal


RE: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - Fish - Oct 4, 2025

(Sep 26, 2025 01:27 AM)Yanix Wrote:  Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.

Thats probably whats coming in the future...


RE: 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock - DAL-SHA - Oct 7, 2025

Looks like the internet’s become one giant, sneaky energy vampire—your CPU’s working overtime, and you didn’t even get a coffee break! ☕💻💸🤦‍♂️🕵️☹️☹️☹️