I'm kind of surprised that Microsoft aren't able to preempt this scenario better, with the amount of money they're pouring into SecOps and surveillance.

Signs point to the Miasma worm, but this is unconfirmed yet.