Malicious actors are leveraging GitHub Actions (GHA) and Azure virtual machines (VMs) for cloud-based cryptocurrency mining. Over 1,000 repositories and 550 code samples were spotted abusing GitHub Actions to mine cryptocurrency. Due to this, the cost of electricity to the target organization increased from $20 up to $130 per month. Early detection of possible exploits in a cloud environment is very important to stop such attacks before they cause any major damage.