This is why no one should be going on there and def not logging in, it must be considered totally compromised and to consider anything less is just really bad opsec.