Security report: At least 3,500 websites have been maliciously injected with hidden Monero mining scripts

On July 22, according to Decrypt, researchers from the cybersecurity company c/side reported that malicious Monero XMR mining software attacked multiple websites, with a new wave of crypto hijacking emerging. At least 3,500 websites are running hidden Monero mining scripts. Unlike traditional crypto hijacking, these malicious software limit CPU usage and hide traffic in WebSocket streams, avoiding the obvious characteristics of traditional crypto hijacking. Hackers follow a "stay low-key, mine slowly" strategy, targeting unpatched websites and e-commerce servers.