The big bang is when the escape is on AWS
Hook into the host process (up the chain to the top) that updates infrastructure and guest OS's and deploy a ransomware "patch."
let it get replicated and backed up for a couple days, on all storage types, then fire it off on D-day (d for the dummies who didn't have some form of offline backup, whether local or cloud).
Clean up costs would be incredible. Millions of servers would be looking at pay up or start from scratch. Tracking down and re-running even a couple of days of transactions would be an incredible amount of work.
Cryptocurrencies are a big part of the problem. They make getting away while keeping ransom payments too easy.