threatpost.com
LoudMiner Cryptominer Uses Linux Image and Virtual Machines
A Tiny Core Linux 9.0 image configured to run XMRig runs on a VM, rather than victim machines hosting the malware locally.