Project keeps getting incorrectly flagged for "mining crypto" and suspends VMs

[tamimj]

Two of my VMs provisioned on GCP have been incorrectly flagged for "mining crypto" and suspended. All I am running is nextjs and flask servers, and doing NOTHING related to "mining crypto"; I've never even done "mining crypto" and don't even know how to!

This is extremely frustrating and just unacceptable given I have users relying on these services.

I need them run again so I can back up my data and move on to a better service like Azure/AWS because GCP is a joke.

Can someone help!? 

[Willbin]

Hello @tamimj,

Welcome to Google Cloud Community!

Can you send the message you received so we can check the events that happened specifically to your instances or project? If you are not the one who did this to your VMs, you might want to consider whether or not your account has been compromised. 

You can start by resetting your Google account password and do a full security refresh like creating new service account keys, ssh keys, etc.. 

For privacy and policy reasons, we cannot investigate the OS-level issues in your VM related to this suspicious Activity alert. It would be best to be in touch with the Cloud Platform Support so they can further inspect your project.
https://cloud.google.com/contact
https://cloud.google.com/support-hub/#google-cloud-platform

[edsonsamtech]

I'm also not doing anything related to cryptocurrencies and I still have restrictions on my account