The malware harvests AWS credentials and installs Monero cryptominers.
Source: Threadpost