It can be both. Plenty of Chinese "state sponsored" APTs are happy to sell to the highest bidder, even database dumps of Chinese companies. E.g. APT17: https:/

It can be both. Plenty of Chinese "state sponsored" APTs are happy to sell to the highest bidder, even database dumps of Chinese companies. E.g. APT17: https://intrusiontruth.wordpress.com/2019/07/25/encore-apt17-hacked-chinese-targets-and-offered-the-data-for-sale/ https://intrusiontruth.wordpress.com/2019/07/25/encore-apt17...