A security guard gained access to the heating, ventilation, and cooling system for a medical clinic and used it to establish a persistent remote connection for personal purposes, while also attempting to build a botnet with other computers in the building.