“Graham Cluley (born 8 April 1969) is a British security blogger and the author of grahamcluley.com, a daily blog on the latest computer security news, opinion, and advice.”
Why should I believe this guy?
You don’t have to believe. Investigate. Take his heat map and apply it to future Q drops. See if it fits.
Actually it is Mark Burnett whose credibility you should check out. Cluely is merely reporting Burnett’s conclusion, albeit with some inflammatory language.