That is good PR which they need for the affiliate business model they use. Basically, as an affiliate you will provide/leak some sort of backdoor, access to sys

That is good PR which they need for the affiliate business model they use. Basically, as an affiliate you will provide/leak some sort of backdoor, access to systems or information about security vulnerabilities to the group. Then, they will perform the actual attack using your information. The revenue is then split between the affiliate and the group. There was recently a good darknet diaries episode about this, i find it quite fascinating.