CRYPTOJACKING with XMRIG and Nanopool (How I Was Hacked)

In this video I illustrate how I was recently hacked on Google Cloud Platform. In this particular example I explain how cryptojacking works. Here the user utilized leaked service account credentials to spin up compute engine virtual machines each containing a several commercial grade NVIDIA GPU cards. The user then utilized XMRIG to begin mining both Monero and Ethereum through my account. After I kicked this user out of my GCP instance I worked on tracking them down. After finding the user's cryptocurrency wallet address, we were able to determine that they have multiple scams in place and have generated millions in USD. We also review how this user is gathering leaked service account credentials. 🧠 Need expert help fast? Book a 1:1 session and get unstuck today 👉 https://bit.ly/42I10y5 🎥 NEW: Unlock members-only videos and behind-the-scenes drops 👉 https://bit.ly/4iyBm4I 🛠️ The exact tools and gear I trust (and actually use) 👉 https://amzn.to/44fKDv4 📚 Step-by-step setup guides, templates, and insider resources 👉 https://bit.ly/4ivZDID 🛒 Grab custom gear and tools designed by me 👉 https://etsy.me/4isKwjb 📩 For sponsorships or business inquiries, reach out: macgyvertechnology@gmail.com Cryptojacking Overview 0:00 - 0:55 How I Got Hacked 0:55 - 1:45 Leaked Service Account Credentials 1:45 - 2:53 Discovering the Hack 2:53 - 4:40 Economics of Cryptojacking 4:40 - 5:20 Google Suspicious Activity Alert 5:20 - 6:01 GCP Killswitch Script 6:01 - 6:26 Reviewing the API Calls 6:26 - 7:39 Compute Engine Deletion Protection 7:39 - 8:00 API Calls to Provision VM and GPUs 8:00 - 8:30 Compute Engine Startup Script 8:30 - 9:07 XMRIG 9:07 - 9:19 Ethermine.org 9:19 - 9:40 Wallet ID 9:40 - 10:30 Finding the Hackers Ethereum Address 10:30 - 11:18 Service Accounts on GitHub 11:18 - 12:30 Summary 12:30 - 13:12 Compute Engine Startup Script https://gist.github.com/aioverlords/7b1a9ca928418bb5d74ee1e2b19fff8d Hacker's Ethereum Wallet ID https://etherscan.io/address/0x8f54972f4ca40bd3ffc8b085f6ece1739c40c65f #gcp #crypto #cryptojacking Amazon Alexa Skill https://github.com/aioverlords/Alexa-Translation-Skill-Google-NLU Google Compute Engine KillSwitch https://github.com/aioverlords/Google-Cloud-Platform-Killswitch