An attacker group known as Rocke is taking a new approach to install un-authorized cryptocurrency mining software on cloud servers, they're taking control of systems and un-installing existing cloud security software.