I’m pretty sure when the license is revoked, that includes the license for using it as well.
The article doesn’t seem to state if they are redistributing it or not, but I’ll take your word for it. Without being a user of the infringing product, I’m not able to tell whose premises the server they SSH’d into is on.