A quiet wave of browser-based crypto miners is spreading across the web, repurposing compromised sites from older attacks.