TrendMicro researchers from TrendMicro detected the active campaign cryptocurrency-mining campaign. The campaign uses an outdated security flaw with Network Weathermap that allow a remote attacker to inject arbitrary codes in the server. The attack primarily focuses on Japan, Taiwan, China, the U.S., and India. Researchers found two unique usernames matching Monero wallets and they said as of March 21, 2018, attackers mined approximately 320 XMR or about $74,677 based on the two wallets.”]
Source: https://gbhackers.com/cryptocurrency-mining-campaign-linux-servers/