A wave of attacks against vulnerable VMware Horizon servers starting January 19, 2022. Many of the attacks have involved attempts to deploy cryptocurrency miners such as JavaX miner, Jin, z0Miner, XMRig variants.

https://news.sophos.com/en-us/2022/03/29/horde-of-miner-bots-and-backdoors-leveraged-log4j-to-attack-vmware-horizon-servers/