[tremarley]

That’s precisely what happened in this attack.

They were attacked when they went online

[m3kw9]

No, the computers were pre infected. If they used airgapped systems only to sign there would be almost no vector to from other than some major zero click zero day stuff, in that case everyone is screwed