Cybercriminals go wherever the money is, following the path of least resistance to achieve their goals. I have seen no evidence that the NSA is directly helping them. Criminals will use convenient tools to attack vulnerable systems that have value. In this case, it is victim's systems' resources or crypto-coin wallets/accounts themselves. Nothing surprising in that.

Yes we do need to let the world know about these criminal attacks so people can adopt basic security practices and good computer hygiene. But lets not add unnecessary drama, conspiracy theories, or FUD to a situation that needs real attention.