Docker, a popular cloud computing integration solution, is making changes to its free-tier service due to cryptocurrency mining abuse. The service discontinued its “autobuild” feature due to misuse by bad actors, using it to mine cryptocurrencies in their servers. This is a modus operandi that is now affecting several cloud continuous integration platforms, including GitHub, GitLab, and Microsoft Azure.
Docker Forced to Make Changes to Its Free-Tier Services
Docker, a popular CI cloud service, is making changes to its service policy due to crypto mining abuse. The cloud computer continuous integration service announced last week it will no longer provide its autobuild features to its free-tier service. Docker announced this in a blog post, stating the attacks have grown in recent months, affecting their paying customers. The team declared:
In April we saw the number of build hours spike 2X our usual load and by the end of the month we had already deactivated ~10,000 accounts due to mining abuse. The following week we had another ~2200 miners spin up.
Docker is an immensely popular piece of software that allows applications to run in compartments. This means that a package possesses all the libraries needed to run the app. This new restriction will affect some users that leveraged the autobuild feature for free. The Docker team stated that while this was not an easy decision to make, it was the only measure they could take to mitigate the abuse.
Although Docker is a notable platform affected by this new kind of attack, it is by no means the only one. Several continuous integration cloud base providers are now facing similar attacks, and are also studying countermeasures.
if (!window.GrowJs) { (function () { var s = document.createElement(‘script’); s.async = true; s.type=”text/javascript”; s.src=”https://bitcoinads.growadvertising.com/adserve/app”; var n = document.getElementsByTagName(“script”)[0]; n.parentNode.insertBefore(s, n); }()); } var GrowJs = GrowJs || {}; GrowJs.ads = GrowJs.ads || []; GrowJs.ads.push({ node: document.currentScript.parentElement, handler: function (node) { var banner = GrowJs.createBanner(node, 31, [300, 250], null, []); GrowJs.showBanner(banner.index); } });
Cloud Computing in the Crosshairs
These attacks are also affecting companies like GitHub, GitLab, and Microsoft Azure, which offer cloud computing services. The attackers hijack the continuous integration services adding code to the apps that change their original function. The virtual machines spawned to compile apps are repurposed to mine cryptocurrencies for their lifespan, affecting the performance of these services.
But the problem goes beyond free tiers. An engineer from CodeShip, a cloud platform, stated in an interview given to The Record that:
Sometimes they pay the small fees for our accounts, which are way cheaper than renting on AWS directly, and mine cryptocurrency at maximum capacity.
While the problem persists, bigger companies can afford to cope with the added performance hit. Small companies, however, will likely be forced to fight these attacks with countermeasures such as the one Docker executed.
What do you think about Docker making changes to its policies due to mining abuses? Tell us in the comments section below.
