I wanted to ask who paid them to say such nonsense, but
AVG used metasearch services such as FilesTube and FileCrop to analyze scores of hacks and cracks to find this data
Well that's possible. Self-respecting grups only release the good stuff. Whatever you can download on those 'tubes', nobody knows. But I'd bet most of those aren't even hacks and cracks, but just some random crap that gets downloaded to the computer, usually automatically.
BTW yes, I download cracks for games I buy. Go on, mark me as the bad guy. I'll rather take my chances with a good cracking group and 1000 people who give feedback about it than some corporate spyware like SecuROM, StarForce, Origin or Steam.