RSA researchers have discovered a China-based VPN network dubbed Terracotta that is used extensively to launch advanced persistent threat (APT) attacks and that hijacks servers of unsuspecting organizations in order to add new nodes to its network.
via Black Hat 2015: Attackers use commercial Terracotta VPN to launch attacks | Network World.
Linux Security Blog 