Image: github.com
A cryptominer on a home NAS found and cleaned up by Claude
While asked to move a few homepage links, Claude noticed odd activity from a forgotten container, then rebuilt the containers and locked them down.
Credits
- Reddit poster UsedToBeaRaider Source ↗
- Repository account glanceapp Source ↗
Earliest dated source:
The full story
The poster had left a half-finished Docker container for a card-game project on their NAS. They asked Claude to move a couple of links on their Glance homepage and came back half an hour later to find it still running commands.
Claude had spotted something odd (something about ?z=), explained what had happened, rebuilt the front and back end containers, made them reachable only on the Docker network, and advised how to stay secure. The title says a cryptominer had been using the NAS for two years.
How it was done
Tools
Themes
Loading themes…
Sources
From a short post by the maker, so the details are as they tell them.
- Reddit: Claude caught a cryptominer that'd been using my NAS for two years.Reddit poster: UsedToBeaRaiderPosted
The maker's post on r/ClaudeAI.
If it disappears: archived copy of Reddit: Claude caught a cryptominer that'd been using my NAS for two years. (opens in a new tab)
- The code: github.comRepository account: glanceapp
Linked in the post.