"It turns out most victims do not pay, and crypto mining has become a more lucrative form of financial gain for attackers," says Chris Morales, head of security analytics at Vectra. "That leaves disruption of services, which I believe to be what is most likely happening here.”