The article is sparse on how they implemented. Do you need a Mac/iPhone or can this thing run on very cheap hardware that can be deployed at scale?

Given they found this almost two years ago, I wonder if there is an actual attack or exploit that has been deployed or is this one of those attacks that don’t leave the lab environment?