A threat actor been spotted on a number of honeypots looking to download and execute malicious cryptomining malware.
Source: Threadpost