Motivation: Financial
A prolific 2019 breach-seller persona associated with large batches of stolen account databases. Some modern reporting groups it with the broader ShinyHunters data-theft ecosystem, but that relationship and the seller-vs-intruder distinction should be handled cautiously.
Relationship: possible predecessor or overlap with ShinyHunters ecosystem. Attribution caution: seller does not always equal intruder.
Attribution draws on public threat-intelligence reporting · Actor-claimed + sample (seller). Primary source →
Check your exposure privately, or request a tailored exposure audit.