See: How people have found miners running on compromised NAS boxes and even DVRs.