State actors = malware developers
State-sponsored actors absolutely have the resources to produce malware to exploit Spectre.
I would be surprised if some did not already have the tools/malware. But as we well know they cannot keep their toys in their playpen, so we have to expect that other ne'er do wells will acquire them.
Biting the hand that feeds IT
