A new threat actor named “Panda” has generated thousands of dollars worth of the Monero cryptocurrency through the use of remote access tools (RATs) and illicit cryptocurrency-mining malware. Cisco Talos first became aware of Panda in the summer of 2018, when they were engaging in the successful and widespread “MassMiner” campaign. In all, we estimate that Panda has amassed an amount of Monero that is currently valued at roughly $100,000. Organizations worldwide are at risk of having system resources misused for mining purposes or worse, such as exfiltration of valuable information.”]
Source: https://blog.talosintelligence.com/2019/09/panda-evolution.html