A cryptocurrency mining code called Coinhive is creeping onto unsuspecting websites around the net.
Coinhive uses javascript to harness computer users CPU capacity when they visit a website.
So, when you visit a website with Coinhive code your computer is working to mine cryptocurrency for someone.
Older article, current brief.
Know what changed in cyber before the day gets noisy.
The 5-minute weekday brief for exploited flaws, CISA moves, identity risk, and the security stories that actually matter.
Free. Weekday mornings. 5 minutes or less.
Built from 100+ trusted cybersecurity sources.
Coinhive itself is not Malware.
Coinhive is not malware by itself. Coihive code is a technique to generate income from websites as an alternative to running ads on the site. When the user is notified up front and is given the choice to leave the site or continue then we have no moral objection.
However, often the code is not disclosed to the user.
Even worse, hackers are now installing the code on unsuspecting websites in order to profit. Most of the victims are using an older version of Drupal that has vulnerabilities that can be exploited to install the script.
Older article, current brief.
This article gives you the background. The brief gives you what changed next.
Get the weekday cyber brief for the new exploitation, policy moves, and risk shifts this article could not cover when it was published.
Free. Weekday mornings. 5 minutes or less.
Built from 100+ trusted cybersecurity sources.
Mining the cryptocurrency Monero is the most common use for the Coinhive mining code. In fact, the folks that run Monero are aware of this issue and working on solutions to lesson the attacks.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
New Cryptocurrency Regulation is Expected Soon
"Tougher Rules are Coming for bitcoin and other Cryptocurrencies. Here's What to Know," written by David Gura (2021) for NPR, explains that...
AI-Assisted Attacks Are Compressing Every Defender’s Reaction Window in 2026
AI-assisted attacks are shrinking defenders' reaction windows through faster phishing, faster weaponization, and pressure on patching and visibility.
How to Deal with Ransomware in 2026
Learn how organizations can prevent ransomware, respond under pressure, and recover operations faster with stronger preparation and containment.
The 5-Minute Cyber Brief: September 3, 2026
The fastest way to catch up on what changed after this article was published.
