This is a sophisticated multi-vector virus designed to exploit many weaknesses, and even the controllers (these do not run Windows). Because they knew the controlling computers did not connect to the internet, they embedded their own communication schemes. And they had access to the correct controller hardware and revs and compromised signatures. Wow.