Unless servers are installed with HIPS, anti-malware, APT and networks are implemented with WAF, IPS - that are able to detect known and unknown threat such as malware that work as botnet - it is difficult to know the servers have been infected and is make use off to attack other system.
Reply · Like