As many as 25,000 web servers infected with Linux malware have been used in the past two years to hit website visitors with two variants of Windows