Wrong paper linked. See: https://www.theregister.co.uk/2019/05/20/wajam_malware_claim... and https://arxiv.org/pdf/1905.05224.pdf

Why did I read that username as hero.us?