A US-based organization specializing in large-scale public utility work, specifically R&D for heating/cooling within large industrial environments, was expanding their operations in Asia. What they didn't realize is that as they built new systems using a gold image they were also injecting malware in those new systems.