On July 22nd, according to Decrypt, researchers from cybersecurity company c/side reported that malicious Monero XMR mining software has attacked multiple websites, leading to a resurgence of cryptocurrency hijacking. At least 3500 websites are running hidden Monero mining scripts injected with malicious intent. Unlike traditional encryption hijacking, these malicious software avoid the obvious features of traditional encryption hijacking by limiting CPU usage and hiding traffic in WebSocket streams. Hackers follow the strategy of "keeping a low profile and mining slowly" to launch attacks on unpatched websites and e-commerce servers.