An operation coordinated by Interpol, dubbed Goldfish Alpha, dismantled an illegal cryptocurrency network operating in Southeast Asia. The operation was launched in June 2019, the experts first identified the compromised devices then alerted victims to install security patches that lock out the malicious code. In August 2018, researchers from Trend Micro and Qihoo 360 Netlab reported that hundreds of thousands of MikroTik routers around the world had been infected as part of a massive cryptojacking campaign. After the initial phase, the campaign was targeting devices outside Brazil, and it has been estimated that roughly 170,000 routers were compromised to inject the Coinhive script.”]
Source: https://securityaffairs.co/wordpress/96190/breaking-news/interpol-goldfish-alpha-cryptojacking.html