Detecting crypto-mining attacks