More than 50,000 MS-SQL and PHPMyAdmin servers were compromised by Chinese hackers and used to surreptitiously mine for TurtleCoin as part of a large-scale cryptojacking campaign dubbed Nansh0u. The campaign was detected during early-April and it started as far back as back February 26, targeting servers located all over the world and belonging to companies from a wide range of industry sectors, “with over seven hundred new victims per day”””
Source: https://www.bleepingcomputer.com/news/security/nansh0u-miner-attack-infects-50k-ms-sql-phpmyadmin-servers/