TechFlame news, July 30, the security research agency c/side recently revealed that more than 3,500 websites have been hacked and implanted in covert JavaScript cryptocurrency mining programs. The attackers use web workers (web workers) and web sockets (WebSocket)

technology to secretly perform mining operations when users browse infected websites.

Research shows that attackers maintain connections to external servers through WebSockets and can dynamically adjust mining intensity according to device performance to reduce the risk of detection. Notably, the domain name used to launch mining programs has previously been used to deploy Magecart credit card stealing programs, indicating that attackers are diversifying their

attack methods.
The exact manner in which

the site was hacked has not yet been determined. Security researchers recommend that website administrators strengthen JavaScript code security reviews and regularly check for abnormal external connection behavior

.