Over 3,500 Websites Compromise Hidden Monero Miners

Cybersecurity firm c/side uncovered a hidden Monero mining operation affecting over 3,500 websites, employing advanced stealth techniques to avoid detection.

The widespread compromise highlights ongoing vulnerabilities in web server security, raising concerns about resource misuse without harming individual crypto wallets.

Hidden Monero Miners on 3,500 Websites Revealed

Cybersecurity firm c/side identified a cryptojacking campaign on over 3,500 websites, deploying obfuscated JavaScript miners. The campaign draws strong parallels to the defunct Coinhive service.

The malware operates by mining Monero, exploiting server resources. Cybersecurity analysts note the absence of traditional indicators of compromise, making detection difficult.

Web Server Vulnerabilities Pose Major Operational Risks

The attack affects server owners rather than individual crypto users. Industries dependent on web server reliability face potential operational disruptions.

While no direct financial losses are reported, the campaign’s large scale underscores the vulnerability of web servers to cryptojacking, necessitating urgent security measures.

Lessons from Coinhive and Future Cryptojacking Threats

Similarities to the Coinhive campaign highlight persistent cryptojacking threats. Experts stress stealth improvements in resource handling and obfuscation.

Future attacks may exploit improved tactics, tapping into unprotected systems. Security practices must evolve to mitigate potential escalations in cryptojacking vectors.

“By throttling CPU usage and hiding traffic in WebSocket streams, it avoided the telltale signs of traditional cryptojacking,” said a c/side Analyst from Cybersecurity Firm c/side.