I got hit with this. I run Plex on Linux and I hadn't realized that they changed their apt repo URL at one point so I was way behind.
Luckily, the whole attack was hilariously incompetent. All of my cores were pegged at 100 so Plex was unusable so I went to investigate and immediately found a process called MyLovelyMiner.
I imagine someone trying to run an illicit crypto miner on other people's hardware would want to do so surreptitiously, but they sure made it as obvious as they possibly could.
Luckily, the whole attack was hilariously incompetent. All of my cores were pegged at 100 so Plex was unusable so I went to investigate and immediately found a process called MyLovelyMiner.
I imagine someone trying to run an illicit crypto miner on other people's hardware would want to do so surreptitiously, but they sure made it as obvious as they possibly could.