This also happens with covert botnets running secretly on user machines.