From Bleepingcomputer
Dutch security researcher Victor Gevers has discovered 2,893 Bitcoin miners left exposed on the Internet with no passwords on their Telnet port.
Gevers told Bleeping Computer in a private conversation that all miners process Bitcoin transactions in the same mining pool and appear to belong to the same organization.
"The owner of these devices is most likely a state sponsored/controlled organization part of the Chinese government, " Gevers says, basing his claims on information found on the exposed miners and IP addresses assigned to each device.
Miners taken offline shortly after
Gevers is also the chairman of the GDI Foundation, a non-profit organization that coordinates vulnerability disclosures and works to secure exposed devices. For the past two days, Gevers has been investigating the incident and was planning to reach out to the affected organization.
This will not be necessary anymore as it appears that someone from the affected party saw Gevers' tweets and secured the exposed devices shortly after.
