The campaign is stealing credentials from unpatched servers at scale, due to “neglect and efficiency,” says analyst, and the ...