U.S. Markets open in 4 hrs 22 mins
  • S&P Futures

    4,224.50
    -0.75 (-0.02%)
     
  • Dow Futures

    34,753.00
    +67.00 (+0.19%)
     
  • Nasdaq Futures

    13,660.00
    -49.75 (-0.36%)
     
  • Russell 2000 Futures

    2,258.00
    -9.90 (-0.44%)
     
  • Crude Oil

    65.36
    +0.46 (+0.71%)
     
  • Gold

    1,836.30
    +5.00 (+0.27%)
     
  • Silver

    27.78
    +0.31 (+1.12%)
     
  • EUR/USD

    1.2168
    0.0000 (-0.0000%)
     
  • 10-Yr Bond

    1.5770
    0.0000 (0.00%)
     
  • Vix

    17.50
    -0.89 (-4.84%)
     
  • GBP/USD

    1.4089
    +0.0099 (+0.7087%)
     
  • USD/JPY

    108.8150
    +0.2330 (+0.2146%)
     
  • BTC-USD

    58,532.23
    +388.74 (+0.67%)
     
  • CMC Crypto 200

    1,564.38
    +128.60 (+8.96%)
     
  • FTSE 100

    7,132.79
    +3.08 (+0.04%)
     
  • Nikkei 225

    29,518.34
    +160.52 (+0.55%)
     

Hackers Mined Crypto on GitHub’s Servers: Report

Anna Baydakova
·1 min read

Hackers have been using GitHub cloud infrastructure to covertly mine multiple cryptocurrencies, The Record reported.

The attacks were first spotted by a French software engineer in November, a fact the development platform’s team confirmed to The Record last week via email.

The attack abused a GitHub feature called GitHub Actions, which allows users to automatically execute tasks and workflows triggered by a certain event happens inside their repositories. To launch crypto mining software, the attackers would fork an existing repository, add malicious GitHub Actions element to the original code, and then file a Pull Request with the original repository to merge the code back into the original, The Record wrote.

Related: Grayscale to Convert Grayscale Bitcoin Trust (GBTC) to ETF When Permissible

The original project owner didn’t have to approve the malicious Pull Request because right after it was filed GitHub’s systems would read the attacker’s code and launch a virtual machine, which would download and run crypto-mining software, as Dutch security engineer Justin Perdok told The Record. He added that “attackers spin up to 100 crypto-miners via one attack alone, creating huge computational loads for GitHub’s infrastructure.”

The mining software, according to screenshots published by The Record, included SRBMiner, a software for mining multiple cryptocurrencies using easy-to-buy consumer hardware, namely GPUs and CPUs.

In any case, it looks like the attackers didn’t look to damage the repositories in any way, only to get free coins using GitHub servers, the report reads.

Related Stories