PPMiner

PPMiner is malware that mines the Monero crypto-currency on an infected machine. To achieve that, the malware will drop a version of XMRig on the infected machine as “/tmp/mshelper/mshelper” and will use “xmrpool.net” for mining:

Source: CheckPoint

Links:

• New Mac cryptominer uses XMRig

Samples:
f94ca9b1b01a7b06f19afaac3fbe0a43075c775a