Malware on public sector devices was active for almost a month