It s basically a crypto miner, not some magic software which brings money. It uses your GPU and CPU to mine crypto. Is it legit? Well, Nicehash was legit, offered the same service and yet they got hacked for 4700 BTC.
The first thing I d ask myself if how can I be sure to be able to remove that miner 100% when I decide to do so.
Yeah, it was "hacked" but without any professional and thorough investigation how do we know that it wasnt an inside job? Everytime an exchange or any BTC service is hacked, that should always be the first question asked because it is so easy for employee to instigate a hack with some help outside the company. In some cases it might be the owner exit scamming.