Cryptocurrency Miners Are Now Abusing the Free Tiers of Cloud Platforms

An anonymous reader shares a report:

Over the course of the last few months, some crypto-mining gangs have switched their modus operandi from attacking and hijacking unpatched servers to abusing the free tiers of cloud computing platforms. Gangs have been operating by registering accounts on selected platforms, signing up for a free tier, and running a cryptocurrency mining app on the provider's free tier infrastructure. After trial periods or free credits reach their limits, the groups register a new account and start from the first step, keeping the provider's servers at their upper usage limit and slowing down their normal operations...

The list of services that have been abused this way includes the likes of GitHub, GitLab, Microsoft Azure, TravisCI, LayerCI, CircleCI, Render, CloudBees CodeShip, Sourcehut, and Okteto.

GitLab and Sourcehut have published blog posts detailing their efforts to curtail the problem, with Sourcehut complaining cryptocurrency miners are 'deliberately circumventing our abuse detection,' which 'exhausts our resources and leads to long build queues for normal users.'

In the article an engineer at CodeShip acknowledges 'Our team has been swamped with dealing with this kind of stuff.'

Read more of this story at Slashdot.