USAID cryptojacking incident

The U.S. Agency for International Development (USAID) was hit by a cryptojacking attack. A global administrator account in a test environment within their Azure subscription was compromised as a result of a password spray attack. The attackers then leveraged the compromised account to create another account, and both were then abused for crypto-mining, resulting in charges of half a million dollars.