Cloud Network Bandwidth Now Stolen through Cryptojacking

This report analyzes a novel cryptojacking campaign that uses PacketCrypt/PKT Cash to monetize stolen network bandwidth (instead of heavy CPU mining), documents multiple actor clusters and thousands of suspicious GitHub repositories, demonstrates use of rootkits and container-based evasion, shows abuse of free-tier platforms (notably Heroku and CI services), and provides indicators and MITRE ATT&CK mappings for detection and mitigation.