Google warns: the miners are using hacked cloud accounts
The company claimed that 86% of the 50 recently hacked Google Cloud accounts were used to mine cryptocurrency
01.12.2021 - 14:30
766
1 min
0
What’s new? Google has warned that the majority of the hacked Google Cloud accounts are being used by the attackers for mining. The search giant's cybersecurity service has released a detailed report called “Threat Horizons.”
What does the report say? Google said that 86% of the 50 recently hacked accounts were used to mine cryptocurrency. In most cases, the mining software was downloaded within 22 seconds of being hacked. About 10% of the compromised accounts were also used to scan other public resources on the Internet, and another 8% were used to attack other websites.
How did the attackers gain access to the accounts? Google claims that the attackers were able to gain access to the Google Cloud accounts by taking advantage of the weak protection from the service's customers. Almost half of the compromised accounts had a weak password without two-factor authentication. About a quarter of the hacks involved vulnerabilities in third-party software that users had installed.
What else did Google claim? Seth Rosenblat, the security editor at Google Cloud, added that in late September the company blocked a phishing attack by the Russian hacker group APT28/Fancy Bear. The Google researchers also uncovered the North Korean government-backed group of hackers posing as Samsung employees to send malware within South Korea.
Useful material?
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Telegram
Twitter