Yes, cybercrime is boring, just like security is boring, or app development. The article is focusing on the mundane parts of the business side of certain enterprises (cybercrime-as-a-service), not the individual thrill of discovering something new & exploiting it or selling it to be exploited. Obviously being an article literally written by the opposition would mean it is going to paint their adversaries' life choice as one of a bored drone...