[:Why me?:]
Most of the times, the attacker does not really know his target. They just try to infect as many people as possible. Selecting random IP addresses to attack.

Once having control over a machine several things can happen:
  • The infected machine could be missused as a storage server for illegal MP3 files, offering them to the whole Internet.
  • The machine could be missused to participate in a distributed denial of service attack (DDOS) against another victim.
  • The machine could be missused as a steping stone or relay to obscure the real origine of an attack.
All these scenarios have nothing to do with who you are and if you are an interesting target. So thinking that you are not interesting enough for an attacker does not protect you. Nevertheless today the attacker often try to steal personal information from a machine as well. For example logon credentials to online banking systems. The rate of success depends on what Trojan are used and what layer of protections are in place by your service provider. Just as a note, one-time password tokens or TAN scratch lists do not necessary protect againstall attacks. Read more in the paper section if you dont believe it.

So be aware that everyone could be a possible target for an attack, as soon as you are connected.