It is suspected that the servers may be connected to the Necurs botnet operators.
Article Link: https://www.zdnet.com/article/a-dozen-us-web-servers-are-spreading-10-malware-families-necurs-botnet-link-suspected/#ftag=RSSbaffb68