Microsoft Azure Automation may have an undetectable cryptomining technique

Next, they tried to run the miner on other peoples’ environment. They created a test job for mining and set the status to ‘failed’. When a test job fails, you can create another test job, which they did, and then safely hide the mining operator in the background. The researchers then used the Automation feature on Azure to run the code. The Azure automation tool allows the upload of custom Python packages. The researchers reported that they could create a malware program and rename it to ‘pip’. When uploaded this will replace the conventional pip operation and the rest is in your hands.