Reminds me of the time that I was working at a large (5K+) org and we found a virus to be circulating that was spread by custom scanner software that was really just bloatware / trayware that came bundled with various models, it hardly ever got updated and it did crazy things like run a local (custom) http server etc... what a nightmare.