Cryptojacking in the Cloud: Investigating Attacks on Container Clusters

Adelia Ibragimova

Cloud Village @ DEF CON 33 · Day 1 · Cloud Village

Adelia Ibragimova’s workshop, "Cryptojacking in the Cloud: Investigating Attacks on Container Clusters," at Cloud Village, offered attendees a unique, hands-on opportunity to engage with a critical and pervasive threat in modern cloud environments: **cryptojacking**. Far from a typical lecture, this session was structured as an interactive **Capture The Flag (CTF)** event, placing participants directly into the role of an incident response team. The core mission was to investigate a simulated, yet realistic, cryptomining incident within a containerized cloud infrastructure, requiring teams to identify compromised resources, analyze forensic logs, and meticulously reconstruct the attacker's sequence of actions.

AI review

A well-structured CTF workshop on cloud cryptojacking IR that delivers genuine hands-on value for practitioners who need reps in cloud forensics. Nothing here is novel research — it's competent pedagogy on a known threat class — but the format is honest about what it is, and the scenario design sounds solid.

Watch on YouTube