Massive Cryptomining Campaign Takes Advantage of Free-Tier Cloud Dev Resources

The threat actor behind the campaign, called 'Purpleurchin,' was observed performing over a million function calls daily, using CI/CD service providers such as GitHub (300 accounts), Heroku (2,000 accounts), and Buddy.works (900 accounts).