My little windows tester box got compromised, by me of course. The box had nothing personal on it and my repo hasnt been commited to main or worked on since before this with no commits. So I plugged the nvme back in and unlocked the bitlocker and told claude to find everything and I never got to use AI to hunt malware but its kinda fun. I was laughing after I realized even malware has a rough time on a Intel GPU…
I spent 10 hours dismantling this group/network. Every single one of the github hosting sites and websites are now down, I reported and sat through each one of these to pull the sites. Each remote hosting site for the GPU mining is noticed as well but I couldnt touch the cloud sites that host them because they are just a service but thats what the notice I guess does to let them know the specific cloud/remote service is used by** and for what**
This really made me mad, Ive been on linux for 7 years no incidents and week 1 running a separate windows system and I got compromised, coming from terminal and then having to install from a link or browser is a real risk factor, like even needing hwinfo in the first place