A hacker group has made nearly $75,000 by installing a Monero miner on Linux servers after exploiting a five-year-old vulnerability in the Cacti “Network Weathermap”” plugin. Experts from US security firm Trend Micro said they found evidence connecting these attacks to past attacks on Jenkins servers. All infected servers were running Linux
Source: a script that checked to see if the miner was still active.”