Tag: WebSocket Tactics

With the help of JavaScript cryptocurrency miners, a new attack operation has hacked over 3,500 websites globally, signaling the resurgence of browser-based cryptojacking attacks that were previously made popular by companies like CoinHive. Researchers from the c/side said they discovered evidence of a covert miner embedded in obfuscated JavaScript that evaluates a device's processing power and launches background Web Workers to carry out mining tasks in parallel without sounding an alarm, even though the service has since shut down after browser manufacturers took action to prohibit miner-related apps and add-ons. More significantly, it has been discovered that the activity uses WebSockets to retrieve mining tasks from an external server. This allows the activity to dynamically mod...