The Drupal websites hacked by cybercriminals using the vulnerabilities known as Drupalgeddon2 and Drupalgeddon3 deliver cryptocurrency miners, remote administration tools (RATs) and tech support scams.
http://feedproxy.google.com/~r/Securityweek/~3/GLJhaaWRtnI/hacked-drupal-sites-deliver-miners-rats-scams