Bug bounties are usually for unexploited vulnerabilities that you find yourself. It sounds to me like google didn't discover this vulnerability on their own, th

Bug bounties are usually for unexploited vulnerabilities that you find yourself. It sounds to me like google didn't discover this vulnerability on their own, they discovered malware that was exploiting it. I'm not sure if a bug bounty would pay out for a vulnerability you didn't discover.