The platforms infected thousands of internet-connected devices worldwide to conceal cyberattacks against HHS, NIH, and other US targets.