The ever-growing space of cryptocurrency and blockchain has enabled users to improve numerous areas of their lives, ranging from their business payment methods to how effectively they can diversify their investment portfolio. However, the ease with which an interested party can buy Ethereum online and use it in multiple transactions comes at a cost, inevitably attracting the attention of malicious actors looking to profit from the phenomenon. To better protect users from cyberattack vulnerabilities, major tech companies such as Google are developing programs to cover up gaps in the security ecosystem and help reduce losses and impacts for those involved in similar incidents.
Recently, Google Cloud introduced a Cryptomining Protection Program that can only be used by Security Command Center (SCC) Premium users. The newest launch will provide users with an antivirus service to detect mining malware in the virtual machine memory and more. According to the global tech company, it plans to reimburse Security Command Center Premium members who go through a mining cyberattack, covering the expenses that may arise from such an incident. Understanding more about this requirement and the eligibility criteria can be done on the provider’s website. So far, the most recent initiative aims to provide a safer cloud environment to which potential enterprise buyers can migrate.
How the system functions
SSC Premium buyers can access the recently launched protection program by complying with the terms and conditions imposed. According to the corporation’s representatives, SCCP, or Google is responsible for protecting these customers against the financial damage incurred by going through an unnotified attack as well as data jeopardization.
These malicious attempts must be discovered and stopped in their tracks, notifying the customer about the threat they’re under. Failing to do so can make the victim eligible to ask for cloud credits within a month from the attack’s inception to make up for any related expenses experienced. Suppose an attacker cracks the detection mechanism implemented by Google and installs crypto-mining software on the targeted account. In that case, the provider has the duty to cover the compute engine expenses suffered.
The recent initiatives will help boost users’ confidence in cloud solutions as threats can be rapidly discovered and counterattacked. The current initiative is due to the ever-increasing cloud base and number of utilizers. Furthermore, out of all the hacks on the cloud computing ecosystem, more than half are intended to conduct crypto mining. Thus, the company is taking a shared fate approach to mitigate incurring risks. It is a mental model launched in 2016 to bridge the gap between the provider and the customer. It highlights how responsibilities should be shared, as confusion is always an issue regarding which party is accountable for which operation.
Tracking down cryptocurrency mining attacks
The SSC Premium program uses a wide range of mechanisms to identify the presence of any threat on users’ accounts. One of the capabilities employed relates to spotting crypto-mining attacks and notifying the accounts’ users through the fundamental technology that underpins the protection program.
Virtual machine memory is scanned to discover potential malicious software and malware. The system uses standalone security tools backed by API-driven data gathering and cloud log analysis to identify threats that might fly under the radar. With expert capabilities to detect malware in the virtual machine’s memory, it can more effectively spot threats that would otherwise remain unobserved. The whole cohort of capabilities for cryptomining is made possible by introducing a product into the cloud’s infrastructure.
SCC Premium can also identify compromised identities that create room for hackers to break into the space, allowing them to seize access to the account and begin their attack. This ultra-prevention practice means the system will scan for multiple failed attempts, suspicious account activity, long impersonation chains, and the list of operations. This way, the system spots potential threats long before the attack occurs.
Generally, hackers seek an entry point into the system and breach the cloud account by running software on the accounts used to mine cryptocurrencies. Something as simple as securing the account with a strong password can take users’ safety games to the next level.
The lack of robust security measures increases the vulnerability
It isn’t only the service provider responsible for protecting members’ data, assets, and accounts. Users also safeguard their accounts with minimal and basic practices, such as using strong, unbreakable passwords. The company’s Cybersecurity Action Team suggests that out of all the attacks users deal with, accounts using default and weak passwords stand a higher chance of being compromised.
Creating complex and uncrackable combinations of words and letters shouldn’t be complicated. Numerous websites and platforms are taking this burden off users’ shoulders, so make sure never to create a password that’s easily guessable only to ensure you’re effortlessly remembering it. The security of your password should never be taken lightly, regardless of the platform at hand.
Users continue to bear some responsibility
Google’s undertaking would provide a robust defense against mining threats through the cutting-edge technology used, taking accountability for any breach or failure in this regard. It’s important to note that it doesn’t expand to all Bitcoin mining. Reimbursement is only offered when revenue from crypto mining is lost due to a successful cyberattack using the providers’ cloud services. Furthermore, it doesn’t provide financial coverage for cryptocurrencies like Ethereum, Bitcoin, and others but is only intended for users of mining software like the one utilized in Monero mining.
Google isn’t responsible for the remediation of the attack but only for identifying and notifying the SSC Premium holder about potential attacks, covering Compute Engine costs in the event of failure to meet their obligations. If a mining attack occurs, Google works with the customer to establish the credits they’re entitled to. Still, the user remains responsible for navigating the problem and minimizing their accounts’ exposure to threats.
Such practices conducted by global organizations facilitate interested parties’ ventures into crypto mining. Furthermore, they also create a safer space for crypto communities to explore, potentially expanding the exposure and general public knowledge of digital currency.
