If you re-read the post a little more carefully, that's a reference to the ANT leak, followed by a "well, it could maybe be the same person" about the malware a

If you re-read the post a little more carefully, that's a reference to the ANT leak, followed by a "well, it could maybe be the same person" about the malware auction. Seems more likely to me that the ANT leak gave the auctioneers an idea what to look for to exfiltrate once they got hold of an NSA staging server.