Ugh, I would let them VNC into my computer to repo it if it would mean I could get the CLI tools. I see a lot of reports of it on Twitter as well. Can't they just look for the 403's in the server logs?