HOSTKEY, a hosting provider, alerted a customer to excessive CPU usage on their virtual server, leading to the discovery of a cryptojacking campaign exploiting CVE-2026-60004. The provider temporarily limited CPU resources due to terms of service violations.