← Home · ↑ December 2025 · Bookmark #38135

I got hacked, my server started mining Monero this morning. | Unfinished Side Projects

TL;DR Umami analytics (built with Next.js) had an RCE vulnerability. Got exploited, installed cryptominers Mined Monero for 10 days at 1000%+ CPU Container isolation saved me because it ran as non-root with no mounts Fix: docker rm umami and enable firewall Lesson: Know what your dependencies are built with, and configure containers properly