It's really unclear. There's a good chance we will never know where it came from.

We are definitely going to see dangerous exploits for it because it's not really technically challenging to write the exploit code.

It just allows for a lot of ways that you can manipulate systems or services to basically use UPnP to either hide attacks or use UPnP as a jump point for other attacks,

This is the type of vulnerability that's been exploited many times, and those two worms are the biggest examples because they had the biggest impact,

That one is really easy to exploit.

Not every hacker is a cracker,