[Stanley]

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSock

A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive. 
Although the service has since shuttered after browser makers took steps to ban miner-related apps and add-ons, researchers from the c/side said they found evidence of a stealthy

https://thehackernews.com/2025/07/3500-w...-mine.html

[The Pact]

Unlike older brute-force cryptojacking, this campaign prioritizes stealth. Apparently, it has no obvious CPU spikes makes no visible network calls. And no alerts from basic security tools. Users unknowingly mine crypto while browsing, turning their devices into silent profit engines

We now need to use NoMiner or uBlock Origin to try and stop this.
Keeping Content Management System platforms updated is important because apparently, they target these helpful platforms. ☹️

[Yanix]

Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.

[oRequiem]

Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.

They technically could, I'm surprised we haven't seen them inject anything more brutal

[Fish]

Cryptojacking might seem like a nuisance, but it can signal deeper compromise. If attackers can inject miners, they could inject far more dangerous payloads.

Thats probably whats coming in the future...

[DAL-SHA]

Looks like the internet’s become one giant, sneaky energy vampire—your CPU’s working overtime, and you didn’t even get a coffee break! ☕💻💸🤦‍♂️🕵️☹️☹️☹️