A cryptojacking and stealing malware infected tens of thousands of devices over the past few months, but the attackers made off with only around $6,000.