More than possible, it's common as an attack: cryptojacking.