They are probably mining XMR
There's a LOT of places with crypto mining softwares installed without permission, like Schools, big companies, datacenters, research facilities etc

This is not good for our crypto world, it's illegal