Researchers believe the shift to Linux malware is due to improvements in Windows endpoint security. As a result, threat actors are exploring new attack avenues, increasingly focusing on exploiting flaws in internet-facing systems, most of which run on Linux.

I don‘t get the reasoning here… these servers ran Linux before so what has that to do with Windows endpoints?