Skip to content
November 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Symantec: Many website inserted Cryptocurrency Mining Script
  • News

Symantec: Many website inserted Cryptocurrency Mining Script

Do Son December 21, 2017 2 minutes read

In recent years, along with encryption currency prices are constantly pushed, hackers also played a crooked brains to profit. According to a report released today by Symantec, there is a tendency for public websites to be hacked into mining scripts to become more serious. Once run, these scripts cause the guest machine’s CPU resources to be heavily consumed for a long time. Encrypted currency is clearly more profitable than traditional malware. Often, anti-virus tools recognize and prevent similar programs. As a result, Symantec has been able to portray a “global offensive map” of malicious mining scripts.

According to Symantec, in recent weeks, the mining program has an increasing trend. Most of these scripts are related to Menero – because algorithms are “friendlier” to the CPU – not to Bitcoin or Ethereum.

In late November alone, the company tested and cleared 3 million daily checks when the Monroe dollar started to rise above $ 200. But as of December 16, the digital currency has risen to 350 dollars.

In terms of price movements, most of the digital currencies are aligned with “Boss” bitcoin. The most popular hacking background mining script is the rise of Coinhive in September this year.

Although many security companies quickly put pressure on it, the official website of Coinhive did not disappear but changed the “choose to join” the door. In addition, Symantec’s research shows that the original plug-in is still active.

Due to the mining nature of cryptocurrencies, this plugin can run in the background for a long time. In order to get more revenue, hackers most like to find streaming media site to start. But in many cases, the owner of the site does not know.

In September of this year, the foreign media reported that two backstage platforms were implanted into Coinhive’s live rooms, and even appeared in the form of “Chrome browser extensions.” In addition to pirate sites for purposeful increase revenue, but also short-term installation of mining procedures.

Even worse, hackers have not let go of mobile devices. Symantec has discovered many Android apps with mining scripts – despite the limited CPU performance, mining is not efficient at mining mobile devices.

Since 2017, Symantec has discovered 35 different Android mining applications, an increase of 34% over last year.

Reference: Symantec

Add Daily CyberSecurity as a preferred source on Google

Related coverage

  • Google’s Antitrust Showdown: DOJ Demands Chrome Separation, Android Reforms
  • 800,000 Swisscom personal information was leaked online
  • 0-Click Exploit: PoC Targets Android, Linux, macOS, and iOS Devices via Bluetooth CVE-2023-45866 Flaw
  • OpenAI to Retain Non-Profit Structure, Focus on Societal Impact
  • Critical Security Vulnerabilities in ConnectWise ScreenConnect Demand Immediate Patching
  • Million-Download Node.js Library xml-crypto Hit by Critical Security Flaws (CVE-2025-29774, CVE-2025-29775)
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Tags: Cryptocurrency Mining

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2019-25779CVSS 8.7
    WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through...
    Watchtower Verified📅 Updated: Nov 4, 2026
  • CVE-2023-54413CVSS 5.1
    WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers...
    Watchtower Verified📅 Updated: Nov 4, 2026
  • CVE-2026-81648CVSS 10.0
    The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
    Admin intel📅 Updated: Nov 3, 2026
  • CVE-2026-119977CVSS 8.1
    WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable,...
    CISA KEV📅 Added to KEV: Nov 3, 2026
  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2022-29966CVSS 9.3
    Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or...
    📅 Updated: Nov 3, 2026
  • CVE-2026-38600CVSS 9.8
    A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121246CVSS 9.6
    Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121247CVSS 9.6
    Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121249CVSS 9.6
    Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121229CVSS 9.6
    Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121234CVSS 9.6
    Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121241CVSS 9.6
    Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker...
    📅 Updated: Nov 3, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.