Skip to main content

An Amazon crypto scam left its victim with a $45,000 bill

What’s on your wish list this holiday season? We’d hazard a guess that it does not include a $45,000 bill caused by your Amazon Web Services (AWS) account getting hacked. Yet that’s exactly what happened to one unfortunate soul this December.

Jonny Platt, founder of SEO Scout, was the unlucky recipient of this most unwelcome Christmas gift. As detailed on Twitter, Platt woke up one morning to find their AWS account had been hijacked and had been mining the Monero cryptocurrency for the past several weeks. The resulting charge was that eye-watering $45,000 fee.

Cryptocurrency mining rig from computer graphic cards
Getty Images

The hack was not particularly advanced, and worked by installing a mining script that ran on the AWS Lambda platform. Every three minutes, it would install itself in a different Lambda instance and continue mining for 15 minutes at a time (the maximum allowed on Lambda). That allowed it to operate concurrently on several Lambda instances, maximizing its crypto harvesting.

At least, that’s what you would think. But it turns out that all that effort — and that enormous bill Platt was faced with — only managed to mint six XMR (the code for Monero coins). The total dollar value? A paltry $800.

Getting an $800 return on your $45,000 investment doesn’t exactly seem like a sound business plan. But when you’re getting someone else to foot the bill without them even realizing, problems like that don’t really matter.

🎄 Excited to announce I just received my Christmas present from @awscloud!

😱 Horrified to see it's $45,000 in charges due to some scammer hacking my account + mining Crypto for the last few weeks

⏰ Had no sleep last night. It's now 23 hrs since my support ticket & no reply.

— Jonny Platt (@jonnyplatt) December 14, 2021

As Platt pointed out, what’s worse is that the scam could have been easily spotted by Amazon. The mining script was an unencrypted plain text file, so all AWS needed to do was scan for certain well-known lines in its code that are used by other similar hacks — Platt gave the example of “xmrig” — to get suspicious and suspend the script. Apparently, that never happened.

In the end, it took Amazon 27 hours to reply to Platt’s complaint. Considering the incredible increase in Platt’s monthly AWS spend (150,000%, he estimates), that’s a long time to wait for help. And despite the lengthy wait time, Platt says there’s still no solution — AWS is monitoring his account for 24 hours, after which, the case will be sent to the billing department for review, which he believes can take several days. A quick fix, it ain’t.

Amazon finally called after 27 hrs, no doubt thanks to the attention this got.

The agent was kind, but AWS' processes means I must wait another 24hrs of 'monitoring' before the case is sent to billing 'for review', which can take days

Knowing I'm not alone really helps, thanks

— Jonny Platt (@jonnyplatt) December 14, 2021

If you’re an AWS customer, this whole saga should serve as a reminder to check your settings and ensure your account is secure. And it doesn’t hurt to keep an eye on your bank balance for any suspicious outgoings. As cryptocurrencies continue to grow — and GPU makers release more graphics cards aimed at miners — this kind of scam could become all too common.

Editors' Recommendations

Alex Blake
In ancient times, people like Alex would have been shunned for their nerdy ways and strange opinions on cheese. Today, he…
Best Dell Memorial Day deals: laptops, gaming PCs, monitors, more
The Alienware m18 gaming laptop.

Dell has been in the computing market for ages now and is considered one of the best laptop brands. Along with its other subsidiary, Alienware, it has a pretty tight hold of the gaming market, whether we're talking about gaming PCs or gaming laptops. Of course, that doesn't mean you can't find some other excellent gear, such as monitors and more day-to-day laptops, and you can find great deals on everything as part of the early Memorial Day sale that's happening right now. That's why we've gone out and collected all our favorite deals below, although if you don't quite find what you're looking for, be sure to check out these gaming PC deals and laptop deals.
Best Dell Laptop Memorial Day Deals

Dell's general and day-to-day laptops are pretty excellent, and while you won't find super-cheap options here as you might with a brand like HP, everything you get will be pretty good quality. There are a lot of options to pick from, such as the more budget-oriented Inspiron and Latitude to the higher-end XPS lineup that's meant to compete with the likes of MacBook. Either way, we've found some excellent deals across the board.

Read more
The Meta Quest 3 will get an exciting new type of app
A Windows app extends into 3D space via a Meta Quest 3 VR headset.

A Windows app extends into 3D space via a Meta Quest 3 VR headset. Microsoft

At Build 2024, Microsoft announced it partnered with Meta to extend Windows apps into 3D space with the help of a Quest VR headset. When working on physical objects, it’s important to have spatial awareness of components.

Read more
How to build a PC from scratch: A beginner’s guide
Installing RAM in a desktop PC.

Building a PC for the first time, or even the second or third time, can feel a little intimidating. But one of the best parts about building a computer is that, for the most part, the parts fit where they should, and don't fit where they shouldn't. A graphics card will fit in the graphics card slot, and good luck putting the CPU in the wrong socket.

With a little care, time, and this handy guide, you can build a PC without hassle. We're here to walk you through it.

Read more