“A new form of cryptocurrency mining malware uses a leaked NSA-exploit to spread itself to vulnerable Windows machines, while also disabling security software and leaving the infected computer open to future attacks.”
Source: This cryptocurrency mining malware also disables your security services | ZDNet