Precisely.
Back when Cryptojacking was a new thing the only way to tell was if your fan and resources were screaming even though you were letting it sit there idle doing nothing. You had to be observant enough to know that there was absolutely no way it should be burning that many resources for no reason.