I meant to say, if such a piece of malware were ever actually deployed in the wild researchers would be scrambling to decompile and reverse engineer it, to determine how it worked in order to report the vulnerability.