Campaign that flew under the radar used hacked computers to mine Monero currency.

https://arstechnica.com/security/2017/05/massive-cryptocurrency-botnet-used-leaked-nsa-exploits-weeks-before-wcry/