TrendLabs: Cryptocurrency-Mining Botnet Malware Arrives Through ADB and Spreads Through SSH

Figure 1. Infection chain of the attack

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-mining-botnet-arrives-through-adb-and-spreads-through-ssh/