Fresh machines compromised within minutes

If you thought that you did not need a firewall (or decent patch management), read this one.