A massive global botnet dubbed “Smominru,” a.k.a Ismo, is using EternalBlue SMB exploit to secretly mine Monero cryptocurrency. Smominru has infected more than 526,000 Windows computers, most of which are believed to be servers running unpatched versions of Windows. The botnet operators have already mined approximately 8,900 Monero, valued at up to $3.6 million, at the rate of roughly 24 Monero per day.
Source: https://thehackernews.com/2018/01/cryptocurrency-mining-malware.html