Feeds

Boffins build FREE SUPERCOMPUTER from free cloud server trials

Who cares about T&Cs when there's LIteCoin to mint?

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

Researchers Rob Ragan and Oscar Salazar have built a free LiteCoin-mining botnet that generates $US1750 a week using free cloud signup promotions.

The pair will outline the exploit at Black Hat next month, but have blabbed to Wired about how they used automatic tools and processes to spread a currency-mining botnet across some 150 popular free services that each generated about 25 cents a day -- all on the providers' electricity bill.

LiteCoin became the pair's crypto-currency of choice because BitCoin is hard to generate without graphical processing units these days.

The duo will demonstrate their bot and release the tools required to build one at Black Hat in Las Vegas next month, along with some defensive mechanisms cloud providers could deploy to fend off freeloaders.

The attack worked because of cloud providers' ongoing efforts to recruit customers with free promotions. It appears that none of the providers the pair targeted took much interest in what the researchers were doing with their free servers.

"A lot of these companies are startups trying to get as many users as quickly as possible [which are] not really thinking about defending against these kinds of attacks," Salazar told Wired.

The bot was bult on free and fast tools including Mandrill and FreeDNS.afraid.org for email address registration, variations on public data breach databases, a custom program on Google App Engine, and the Python Fabric to manage scripts controlling the hundreds of cloud instances.

To keep the lawyers off their backs, Ragan and Salazar terminated most of their fraud bots leaving a handful to mine coins to test the failed defenses of cloud providers. It was unclear if freeloading off free cloud subscriptions would breached various computer crime laws which range from vague to non-existent, but it likely breached terms and conditions nine ways to Sunday. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.