Re: Erm, but ...
"If you need to spy on a smaller number of individuals, and for a long time, you need to ensure the infection is limited because there are less chances the malware gets spotted by researches. So you need to target exactly the devices you need to spy."
You may want to learn a little more about how Stuxnet (and doubtless others) initially propagated.
Grossly oversimplified: get it out in volume, but then it stays silent (and therefore less detectable) till it observes environmental evidence that it has reached a target of interest. Then it does interesting things.
Biting the hand that feeds IT
