The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that.