If I be honest, this is not really a surprise. I've heard about people selling Monero RATs before on this forum. Essentially the program mines coins on the victim's computer, resulting in a botnet of Monero miner. Not really a Monero supporter, but why does it matter, these criminal activities are expected if a coin is anonymous.
Those botnets were around for Bitcoin as well, if you can tumble coins and profit they will always be around.