Nevermind malware, not using seL4 should already be a crime in this context.
This is a case of fraud, industrial malfeasance and just plain dishonesty. The software component of the story and its security measures are not even at play. Sure they are probably shit (given the date parsing ...) but even FreeRTOS would make an amazing OS *IF USED PROPERLY *.
Absolutely, and thus there's obvious room for improvement.
>This is a case of fraud, industrial malfeasance and just plain dishonesty.
In practice, this amounts to critical infrastructure sabotage, which fits into terrorism.
If the train network experiences issues, the whole country is impacted.