https://arstechnica.com/security/2024/04/zombie-worm-continues-to-infect-millions-of-ips-years-after-it-was-left-for-dead/ "A now-abandoned USB worm that backdoors connected devices has continued to self-replicate for years since its creators lost control of it and remains active on thousands, possibly millions, of machines, ... Since then, their server continues to receive PlugX traffic from 90,000 to 100,000 unique IP addresses every day"