A new coinminer malware strain targets Linux platform and installs XMR-Stak Cryptonight cryptocurrency miner. Trend Micro’s Augusto Remillano II and Jakub Urbanec on one of their honeypots. The malware is very closely related to the KORKERDS cryptocurrency miner known for hiding with the help of a rootkit. It is not using rootkits to conceal itself, but, instead, it downloads a universal Stratum XMR Stak pool miner which uses the system’s CPU or GPU to mine cryptonight currencies.
Source: https://www.bleepingcomputer.com/news/security/coinminer-targets-linux-kills-competition-to-maximize-profits/