it's easier to damage a windoze machine and remain unrecognized. you start an attack from a computer, that can be easily traced back to the attacker, so you have to infect a couple of server before anyone realizes, that you did something nasty.
linux servers have plenty of logfiles and almost every administrator knows how to deal with them.
maybe they don't know how to write linux-worms - but even if they do, they are afraid of beeing traced back.
it's easier to damage a windoze machine and remain unrecognized. you start an attack from a computer, that can be easily traced back to the attacker, so you have to infect a couple of server before anyone realizes, that you did something nasty.
linux servers have plenty of logfiles and almost every administrator knows how to deal with them.
maybe they don't know how to write linux-worms - but even if they do, they are afraid of beeing traced back.