It could also be that a security model exploited in crypto has now been corrected for, and we are seeing similar attacks spread out to other vulnerable infrastructure that is lagging behind updated threat models.