I have noticed this command running "sustes" and I'm having a hard time finding information about it.
It seems to be a mining hack using servers to mine cryptocurrencies.
wc.conf in the /var/tmp directory (and this conf references cryptonight algo and pools of IPs for mining)
Has anyone else had this issue and if so what is the best way to remove and stop this hack?