Reply to post:

[quote]None of the comments directly touched on the initial infection vector so here it is: STOP PUTTING YOUR SERVERS DIRECTLY ON THE INTERNET.[/quote]

Couldn't have said it better. If you want your systems hacked then stick them on the interwebs.