GitHub Actions Are Used to Mine Crypto Coins

Security company Sysdik wrote up this campaign that they're calling a purple urchin. GitHub actions are apparently used to mine, crypto coins. FBI is warning about a ransomware group that they're called the Daksin team.