"We're surprised it took this long."
TBH....
Me too.
OTOH this is the open world.
If I were a Black hat I'd develop this for my personal toolkit to increase my "productivity." You'd not know I had it unless you got hold of personal development environment. You'd only be aware of it by the number of hits on the .io database and (possibly) the activity of a metasploit run if I'd hosted it on a (compromised) cloud account.
Think of it as the Black hat equivalent of constructing your own light saber.
So my suspicion* would be top grade Black hats have tools like this but they are smart enough to fly below the radar by keeping them to themselves.
*Just a deduction. I don't know any Black hats. I don't know how to talk to any and I don't know how to find them.
Biting the hand that feeds IT
