If I was trying to attack somebody through this route, I wouldn't just release all of them containing malware. Rather, I would target 2 or 3 journalists who I w

If I was trying to attack somebody through this route, I wouldn't just release all of them containing malware. Rather, I would target 2 or 3 journalists who I wanted to monitor and hope that they wouldn't be wise enough to consider the security implications. Most fans would check out as being okay, which would lessen the suspicion. The only way you could definitively tell that these fans are compromised is to consequently check every fan out of the bunch.