During the last few months, crypto-mining gangs have switched their modus operandi from attacking and hijacking unpatched servers to abusing the free tiers of cloud computing platforms. The gangs have been running cryptocurrency mining apps on free-tier accounts. When the trial period or limit is reached, they register for a new free account. This keeps the providers' servers at their upper limit, slowing down normal operations. The Record started monitoring this phenomenon about 6 weeks ago when it first learned about this type of abuse on GitHub. Since then it has learned about similar abuses on GitLab, Microsoft Azure, TravisCI, LayerCI, CircleCI, Render, CloudBees CodeShip, Sourcehut, and Okteto. Automated solutions that detect and respond to this type of abuse may help. Such solutions are costly and not guaranteed to work.