Sophos revealed recent botnet attacks breach Microsoft SQL server databases to install a well-known Monero mining app.