[Maakuth]

There are operations that put cryptominers into any unauthenticated remote desktops they can find. Ask me how I know... Way friendlier than wiping your data though.

[unixhero]

There are groups of people who hunt for writeable ftp servers to be used for random filesharing. At least this used to be a thing