<
https://thenewstack.io/purpleurchin-github-actions-hijacked-for-crypto-mining/>
"This is why we can’t have nice things. It’s great that many cloud and
continuous integration/deployment (CI/CD) providers, such as Buddy.works,
GitHub, and Heroku offer free services. But now, in a massive new case of
freejacking, the Sysdig Threat Research Team (Sysdig TRT) has found attackers
using over a million free serverless function calls, such as GitHub Actions, to
run a gigantic automated cryptocurrency mining operation, PurpleUrchin."
Via Steven Vaughan-Nichols.
Cheers,
*** Xanni ***
--
mailto:xanni@xanadu.net Andrew Pam
http://xanadu.com.au/ Chief Scientist, Xanadu
https://glasswings.com.au/ Partner, Glass Wings
https://sericyb.com.au/ Manager, Serious Cybernetics
