By the end of 2017, 2.7 million users had been attacked by malicious miners this is almost 1.5 times higher than in 2016. They become so active and popular that even ransomware which has frightened the world for the last couple of years, seems to step aside for this threat. 80% of illegal miners contain the open source code of legal miners, or it is just a legal miner that has been packed. The most popular script used by cybercriminals is Coinhive, and usual cases of its use in the wild are websites with a lot of traffic.”]
Source: https://securelist.com/mining-is-the-new-black/84232/