The hackers didn't realize that they had compromised such important boxes; the attack just kept trying to spread itself. There are nearly 500 users on k.org, and not all of them are security-minded.