Linux PRoot utility has been abused by hackers in BYOF (Bring Your Own Filesystem) attacks to store Linux malware.
The main purpose of the BYOF attack is to create a malicious filesystem with a standard set of tools used to use in further attacks.
When the time comes, the filesystem is downloaded on victims' devices to infect the system further.