Cloud Mining, crypto miners, crypto mining, cryptojacking, cyber attacks, github, Github repository, Hackers

Github services is under investigation after a series of reports on attacks against one of its infrastructures by running unauthorized crypto mining apps. Cybercriminals allegedly exploited some security flaws that could have been exploited to mine cryptos illicitly.

Attacks Exploit ‘Github Actions’

According to The Record, a Dutch security engineer, Justin Perdok, detected a cyberattacker targeting repositories belonging to Github. Attacks have been taking place since November 2020, said the report.

Perdok pointed out that the series of attacks “abused a Github feature called Github Actions,†which allows users to automatically execute workflows and tasks only when a specific event happens and then pull the trigger on the repositories.

That said, threat actors are taking advantage of the repositories where Github Actions are already enabled. The Record provided details on how the attack takes place:

However, the engineer clarified that the attacker just needs to fill the “Pull Request†to deploy the malicious workflows. Once it’s loaded, Github’s systems will be cheated, as it will read the attacker’s code and then download a crypto-mining software automatically.

100 Crypto Mining Apps Deployed in One Single Attack

But the malicious campaign seems to be powerful than thought, as Perdok told The Reported that he already detected hackers deploying almost 100 crypto-mining apps – such as Srbminer – in one single attack to mine multiple cryptocurrencies.

Still, the attack seems not to pose a danger to the users’ projects on the platform.

Github already commented on the matter, saying that they’re aware of the issue and “are actively investigating.†However, Perdok stated Github provided him that same comment last year when he reported the flaw.

What do you think about this flaw in Github’s infrastructure? Let us know in the comments section below.

Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.

RELATED NEWS

Expert Believes Nuclear-Powered Crypto Mining Could Help Ukraine to Solve Energy Spending Problems

Bitcoin mining could be a proper asset to solve one of the significant issues in the Ukrainian energy sector: spending. A financial expert praised the recent push given by Ukraine’s government to nuclear-powered crypto mining across the nation. Crypto Mining Can ‘Smooth out’ Fluctuations in Consumption, Says Expert During an interview with Inshe, Alexei Mushak, […]

Xem chi tiết: Expert Believes Nuclear-Powered Crypto Mining Could Help Ukraine to Solve Energy Spending Problems

Over $750 Million in Bitcoin from the 2016 Bitfinex Hack Moved Today

On Wednesday, after bitcoin prices touched a new all-time high, thousands of bitcoins from the August 2, 2016, Bitfinex hack were transferred to unknown wallets. The exact count of BTC moved from the hack is not entirely clear, but one blockchain parser shows that over 12,208 BTC from the 2016 Bitfinex breach worth $754 million […]

Xem chi tiết: Over $750 Million in Bitcoin from the 2016 Bitfinex Hack Moved Today

Over $750 Million in Bitcoin from the 2016 Bitfinex Hack Moved Today

On Wednesday, after bitcoin prices touched a new all-time high, thousands of bitcoins from the August 2, 2016, Bitfinex hack were transferred to unknown wallets. The exact count of BTC moved from the hack is not entirely clear, but one blockchain parser shows that over 12,208 BTC from the 2016 Bitfinex breach worth $754 million […]

Xem chi tiết: Over $750 Million in Bitcoin from the 2016 Bitfinex Hack Moved Today

Venezuelan Guards Seize 76 Bitcoin Mining Rigs Due to ‘Inconsistencies’ in Transport Documents

The Bolivarian National Guard of Venezuela (GNB) is known for having a tough stance against crypto mining rig counterfeits, as several operations have been assigned to combat the issues over the last few months. This time, the Venezuelan authorities seized 76 mining rigs after allegedly detecting inconsistencies in the transport documentation. Rigs Are Presumably ASIC […]

Xem chi tiết: Venezuelan Guards Seize 76 Bitcoin Mining Rigs Due to ‘Inconsistencies’ in Transport Documents

Cryptojacking Activity Decreased for the First Time Since 2018, Says Intelligence Report

Cryptojacking activity seems to be losing momentum, specifically types that mine monero, as a recent report unveiled a slowdown in the illicit crypto-mining activities in the cloud. A threat intelligence firm compiled the results. Report Focused on Cryptojacking Incidents With Monero According to Unit 42 in their “Cloud Thread Report,†cryptojacking attacks have been decreasing […]

Xem chi tiết: Cryptojacking Activity Decreased for the First Time Since 2018, Says Intelligence Report

Abkhazia Plans to Criminalize Crypto Mining as Energy Crisis Deepens— Extends Temporary Ban

Crypto mining in Abkhazia is still a hot potato for the de facto state government, which is now determined to criminalize such activities. Continuous massive power disruptions, in parallel, are fueling the anger of the people towards crypto miners. Public Officials to Face Bigger Penalties According to a report published by E Daily, the Abkhazian […]

Xem chi tiết: Abkhazia Plans to Criminalize Crypto Mining as Energy Crisis Deepens— Extends Temporary Ban

AMD Won’t Restrict Crypto Miners From Using Its Graphic Cards

Major chipmaker Advanced Micro Devices (AMD) keeps making headlines amid the battle between crypto miners and PC gamers. Now, the company seems to have made a step forward to become friendlier to those with crypto mining purposes. AMD Doesn’t Want to Follow Nvidia’s Path According to a PC Gamer report, citing a product manager from […]

Xem chi tiết: AMD Won’t Restrict Crypto Miners From Using Its Graphic Cards

South Korean Officials Notice a Sudden Rise in Crypto Mining Rigs Imports- Over 41 Shipments Intercepted in 3 Months

Crypto adoption is a hot topic in South Korea, and recent figures have been proving it. However, crypto mining activity is also starting to gather interest across the country, per the latest reports from local media outlets. A Single Rig Should Worth $150 ‘or Less’ to Be Considered for Personal Use According to Kyungin Ilbo, […]

Xem chi tiết: South Korean Officials Notice a Sudden Rise in Crypto Mining Rigs Imports- Over 41 Shipments Intercepted in 3 Months

AMD Could Release Its Own Crypto GPU to Mine Ethereum to Calm Down the Skirmish Between Miners and Gamers

Argentinean Startup Accelerator Launches Crypto Mining Farm in Mar Del Plata

Russian Court Orders Mining Firm Cryptouniverse to Face New Trial on Fraud

Kentucky Pushes Mining Tax-Breaks in Bid to Attract Crypto Community

South Korean PC Gaming Rooms Rely on Crypto Mining to Profit During the Coronavirus Pandemic

Report: Bitcoin Mining Firm Northern Data AG Plans for a $500 Million IPO

Russian Crypto Mining Companies Are Expanding Capacity as the Country Becomes a ‘Preferred Hotspot’

Chinese Tea Retailer Joins the Crypto Mining Industry After Hiring Two Roles to Lead Its ‘Bitcoin Business Plan’

Other Articles