Comment by orbifold

At least according to this incident report https://csirt.egi.eu/academic-data-centers-abused-for-crypto..., one of the two attacks had "unknown purpose". In particular it was not tied to crypto mining.