Stuxnet is typically introduced into the supply network via an infected USB flash drive with persons with physical access to the system.
The Tyupkin malware active in March 2014 on more than 50 ATMs at banking institutions in Eastern Europe, is believed to have also spread at the time to the U.S., India and China.