not millions but lookup shamoon. Wannacry was at 300k+ machines, it wasn't millions because one guy registered the kill switch domain within a couple of hours.

not millions but lookup shamoon. Wannacry was at 300k+ machines, it wasn't millions because one guy registered the kill switch domain within a couple of hours. Ring 0 is bad but malware do get SYSTEM all the time, they can inhibit booting at that point just the same.