Operational disruptions and financial losses have already been reported, and six federal agencies say the campaign is ongoing ...
A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.