The attackers have apparently been targeting Microsoft SQL database servers to mine cryptocurrency for two years.
Thousands of Microsoft Servers Infected by Crypto-Mining Botnet Since 2018, Says Report
April 1, 2020
CoinDesk