Security researchers have uncovered a widespread cyber criminal campaign that has seized control of more than 25,000 Unix servers worldwide.