> article said possible downloaded "booby-trapped files"

They gave that as a general example, not for this attack specifically. The article doesn't rule out an attack originating from outside the network (ie: phishing).