The Rocke threat actor is known for cryptocurrency mining campaigns, but it has recently implemented defense evasion and persistence mechanisms ...
source https://www.google.com/url?rct=j&sa=t&url=https://redcanary.com/blog/rocke-cryptominer/&ct=ga&cd=CAIyGmM2Nzk3ODA2ZWViNjVjODI6Y29tOmVuOlVT&usg=AFQjCNH9ua2VfzQ_6Yafq9uH6wxuGoWiVQ