NSABuffMiner crypto-mining component found hidden in C:\Windows\Fonts\Mysql directory on domain controllers, undetected for 4 years.