Crypto mining botnet found on Defense Department web server

Hmm, says it was reported Jan 4th, and "the DoD quickly controlled the system and had shut it down by January 21"...quickly??

That doesn't inspire much confidence, especially combined with a password-less server