Researchers are reporting a cryptocurrency mining botnet that has been leveraging Oracle WebLogic and Drupal vulnerabilities to hijack IoT devices.