I can’t imagine the drone cockpit CPUs have internet access.
Do they use USB drives or music CDs ?Bradley Manning comes to mind.
They obviously do have a communications capacity of some kind. And that must have been what was used to infect them. There must have been a drone downed, and they back engineered it. Yes this is clearly a national-sponsored attack.