Attacks conducted by a still-unknown threat actor involved the delivery of a Python program-executing request to misconfigured Selenium Grid instances to eventually deliver the modified XMRig miner.
Article Link: Selenium Grid misconfiguration leveraged for cryptomining | SC Media