Researchers report that over 3,500 websites have been compromised by stealthy JavaScript malware mining Monero without user ...

Once the QR code has been scanned and has become active, malicious JavaScript can then simulate login portals, exfiltrate data via hidden forms and fingerprint devices for further exploitation.