Gitea

Since April, it has broken into more than three thousand servers, mostly in the United States and Western Europe, with more than eight hundred new infections on the busiest days.

The main targets are internet-facing copies of LightLLM and Ollama, two popular open source tools that let companies run and route AI models, plus a PDF converter called Galtenberg and the code hosting tool Gitea.

Once inside, the malware mines cryptocurrency on the graphics cards meant for AI work and turns the machines into scanners that help find the next victim.

The twist is how it finds its command server.

PoLLM is cryptocurrency malware that has quietly owned thousands of AI servers by walking through tools left open on the internet, and the poem is only how it hides the address of its controller.

The fix is not about poetry.

This week, I'd list every LightLLM, Ollama, Gitea, or similar service your organization runs.

Take anything that doesn't need to face the public internet off it, put a proper login in front of the rest, and patch.

More than three thousand four hundred exposed servers have been compromised by malware that mines cryptocurrency and searches for additional victims.

The campaign targets AI services such as LightLLM and Ollama, as well as Gothenburg and Gitea systems.

Infected machines derive changing command server addresses from selected words in a poem hosted on GitHub.

They also scan for and attempt to exploit other internet-facing systems.

So the fix was in 1.27.1.

Yeah, and by the way, that's spelled T-E-A.

Add at low level goes through the exploit in detail, in great detail.

So if you wanted to learn about how that remote code execution exploit works, you can go watch that video.

I'm using a thing

called I think it's Git, it's either Git T or Git EA, it's G-I-T-E-A.

It's like a GitHub clone written in Go.

I