Now, I'm fairly certain that this software is essentially scanning transactions and storing pairs of (address, r) and when it finds a duplicate 'r' it derives the private key and starts sending anything coming into that address to another address under their control. I'm not sure we are being targeted specifically, I figure an operation like this could work on a reasonable gaming computer with enough memory and storage for the database. If it ever hits an address with a bit more BTC it could have covered the energy / operational costs