PurpleUrchin Crypto Mining With Free GitHub Actions

from blog Welcome To A DevOps Blog on Valewood DevOps Consulting, | ↗ original
Sysdig Threat Research Team has discovered PURPLEURCHIN, an elaborate crypto mining operation taking advantage of automated CI/CD services. Attackers have used millions of free compute cycles through services such as GitHub Actions, Heroku, and others, to run the operation.