Maybe ask if they are turning off the ports these fucks are using for access? Or maybe they should spend money on a quality firewall.