MrbMiner, a new malware that targets internet-facing servers, has been linked to Iran. Researchers say the software company’s name inadvertently made its way into the cryptominer code. The malware was first documented by Chinese tech giant Tencent last September. It hijacked the processing power of the systems to mine Monero and funnel them into accounts controlled by the attackers. The development adds to growing concerns that heavily-sanctioned countries like North Korea and Iran are using cryptocurrency as a means to evade penalties designed to isolate them and to facilitate illicit activities.
Source: https://thehackernews.com/2021/01/mrbminer-crypto-mining-malware-links-to.html

