"usually these attack succeeded because of insecure infrastructure, poorly trained admins, old, non-updating systems (some people still think using Windows XP on internet-connected computers is fine)"
In this case, there are much bigger problems than the lack of AV.
In this case, there are much bigger problems than the lack of AV.