Reading the reports charitably, I would suspect that the Windows malware
delivery mechanism might have been transported to the ISS, but would
have been inactive there in the absence of a Step7 installation for the
intermediate stage to infect.
I hadn't thought they'd write it that way. In this way it makes sense. Thank you for your response.