The lines between security researcher and malware creator is becoming increasingly murky. When is it research, pretending to be a bad egg to get more info or a

The lines between security researcher and malware creator is becoming increasingly murky. When is it research, pretending to be a bad egg to get more info or actually being one? As long as its was fun and games no one really minded, but now malware is used to hold schools and hospitals to ransom. Even criminals don't go after schools and hospitals. Extreme greed and criminality can't be minimized away as 'hacking'. The infosec community likes to be edgy but they need to clean up their act and not give airtime and cover to criminals, and its difficult to believe they don't know who these are.