Gitlab-redis process CPU spike

Hi,

First off, that is not an official service:

root@gitlab:~# ps aux | grep -i redis
gitlab-+ 12353  1.8  0.0  75996 19724 ?        Ssl  Nov03 509:49 /opt/gitlab/embedded/bin/redis-server 127.0.0.1:0
root     24006  0.0  0.0   8740   824 pts/0    S+   15:47   0:00 grep -i redis
redis    26370  0.2  0.0  94152 12664 ?        Ssl  Nov08  50:16 /usr/bin/redis-server 127.0.0.1:6379
root     28826  0.0  0.0   2160   700 ?        Ss   Nov02   0:00 runsv redis
root     28840  0.0  0.0   2304  1224 ?        S    Nov02   0:01 svlogd -tt /var/log/gitlab/redis

that is from my server. Most likely that is a cryptominer since no gitlab processes run as git. That means your gitlab install has been compromised and you need to upgrade it so that the vulnerabilities are fixed. For more info read this post:

2 Likes