“The presence of miners, like Tor2Mine, in a network is almost always a harbinger of other, potentially more dangerous intrusions. However, Tor2Mine is much more aggressive than other miners,”said Sean Gallagher, threat researcher at Sophos.

Database servers are an attractive target for cryptojackers because they are used for resource intensive activity and therefore have powerful processing capability.