AFAIR, from the original media coverage (the virus infection came public about 6 months ago), the infected OS in question isn't on the unmanned aircraft, but rather is located at a base some where, on a bank of machines centrally controlling the drone fleet... so it's not just one drone, it's a whole section of them.
As for how, it was probably a USB key.