You'd have to be pretty well connected wouldn't you? It's not like you can just put up a craigslist ad that says, "looking for cybercriminal to buy my hack". B

You'd have to be pretty well connected wouldn't you? It's not like you can just put up a craigslist ad that says, "looking for cybercriminal to buy my hack". But from the description, it doesn't sound like this vulnerability has much practical use. If you can convince someone to do all the things necessary to tee this up, you can probably just convince them to email you their password.