There was a lot of noise when the Heise story was released with people concentrating on the use of nmap and saying that using nmap is not shocking.

For me the disturbing thing was the pipeline - nmap, fingerprint, identify weak systems and then compromise those systems. Those compromised systems are then used for further surveillance or attacks.

Before the Heise story, I naively believed that this sort of automated attack was only done by organised crime.