South Africa based hacker group “Automated Libra” is behind an elaborate crypto mining scheme which has cost major cloud providers, including Microsoft and Salesforce, millions of dollars in resources and unpaid bills.
In showing how threat actor group Automated Libra bypassed CAPTCHA, used freejacking techniques to set up phony cloud sites, and then leveraged DevOps to launch cryptomining attacks, security researchers point to the increased sophistication of the threat actors.
The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.