Security researchers from Sucuri are warning that criminals are attempting to hack Web content management systems to run Coinhive scripts. Those scripts hijack the CPUs of site visitors to mine a cryptocurrency called Monero. The company says at least 500 websites running WordPress have fallen victim to the attack, and hackers are also attempting to compromise Magento, Joomla and Drupal. The well-known site PolitiFact is among those that have fallen victim to the attack.
A separate report from AdGuard said that 220 websites from the Alexa top 100,000 are serving cryptocurrency mining scripts. In some cases, the website owners may have deployed the scripts intentionally as a way to generate income. The scripts have also been found in Android apps.
