I'm an adviser for one of the companies that partnered with VirusTotal. I cannot go too much into details, but as a partner, we have access to the live submission feed which we analyze in real-time to discover new threats etc. I can assure you that we are not the only one. Furthermore, most partners sync their data not in real-time which could yield incorrect scanning results, making the hackers think they're good to go.
I can also say that the more serious groups/hackers do not use VirusTotal to check their malware. They have their own verified, anonymous services that do the same thing, just without submitting the malware to the anti-virus company.