That's a simplification of what was happening. It was a combination of indicators that they list:
- A large increase in number of nodes
- All nodes using 100% of CPU
- AND a lack of payment history
I'm merely saying that the lack of payment history is an important indicator of suspicious activity. 100% usage by-itself was not the primary indicator that their article discusses.
Are you suggesting that 100% usage implies fraud?
There's a difference between suspecting fraud from high resource usage and equating high resource usage with fraud.
The latter is what is happening, here, and its outrageous.