[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TheHackersNews Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::209811713.png) The Hacker News [@TheHackersNews](/creator/twitter/TheHackersNews) on x 926.2K followers
Created: 2025-07-17 14:11:38 UTC

🚨 Hackers are hiding crypto miners in legit websites using an old Apache flaw (CVE-2021-41773).

They’re mining silently. Detection is hard. Victims see HTTPS + valid SSL.

It’s a stealthy, years-long campaign.

Here’s how it works — and why it matters: 

![](https://pbs.twimg.com/card_img/1945848812423258112/8oqra-LT?format=jpg&name=800x419)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1945848876755509750/c:line.svg)

**Related Topics**
[mining](/topic/mining)
[legit](/topic/legit)

[Post Link](https://x.com/TheHackersNews/status/1945848876755509750)