What started as a few vulnerabilities in firewall equipment has snowballed into a global extortion spree.