a new type of malware attack -- Coin mining attacks

As of early 2018, coin mining attacks are becoming increasingly prevalent due to their lucrative nature. Coin mining malware deployed in attacks is sophisticated enough only to use some, not all, of the host systems resources ................

source - Microsoft

Windows Defender Device Guard is a security feature for Windows 10 Enterprise and Windows Server 2016 designed to use application whitelisting and code integrity policies to protect users' devices from malicious code that could compromise the operating system

Another pattern that represents the way more sophisticated attacks are carried out is referred to by using the acronym OODA, representing four stages in a typical attack – Observe, Orient, Decide, and Act.