Google puts $1M behind its promise to detect cryptomining malware

Google Cloud has put $1 million on the table to cover customers' unauthorized compute expenses stemming from cryptomining attacks if its sensors don't spot these illicit miners. Unlike their louder, flashier counterparts (looking at you, ransomware crews), cryptominers are stealthier. Once they've broken into a victims' …

[Michael Strorm]

> Google will reimburse them up to $1 million

Why the limit? This implies that if *their* much-vaunted tool does so badly that it fails to spot the malware before it's racked up a bill of $1m+, the customer will still be on the hook to Google for the excess?

That doesn't sound confidence-inspiring at all.

[Anonymous Coward]

The chocolate factory

I feel a little stupid that I just figured out that "The chocolate factory " is (being polite) the same as; The chocolate pudding factory - fecaly speaking that is.

I would have a little more trust (not really) in goog if they could secure their PlayStore from malware first. But hey, looks like fun PR for them, even if they are still - the biggest distributor of malware on earth.

[Clausewitz4.0]

Dangerous move

So, if a company has intellectual property these "scan" agents of memory likes, can it be used for something else other than to detect cryptomining? Are there safeguards it will not be used for other purposes?

Are companies allowing Choco Factory to lawful scan/parse the memory of their servers, for real? With no fear of lawsuits following? Good luck using this cloud...

[katrinab]

Re: Dangerous move

Anti-virus scanners are not a new thing, and it is generally expected that people would run them on their server fleet. In fact it is generally considered to be good practice.