A cryptojacking and stealing malware has infected tens of thousands of devices over the past few months, but the attackers have stolen only $6,000