Tunisia CryptoMineJacking

In this scenario, we simulate a case when an analyst got many calls from their clients informing them that the ebanking server was blocked by Antivirus. The clients want a root cause analysis (RCA). Your task is to understand what happened and secure their infrastructure.