Even without user interaction, these boxes have been observed reaching out to known malware command-and-control servers.