Hackers hide Linux cryptocurrency mining by spoofing GPU usage readings, making active mining appear as 0% utilization.