I think the question is: Has anyone observed it being exploited for actual malicious purposes? Sure, it's easy to say "of course it has happened, why wouldn't

I think the question is: Has anyone observed it being exploited for actual malicious purposes? Sure, it's easy to say "of course it has happened, why wouldn't it have?", but it would be really interesting to know how it is actually being used.