It's more like panhandling. They don't have anything to threaten with, the most they have is some minor complaint on a test scan, like Apache version being repo

It's more like panhandling. They don't have anything to threaten with, the most they have is some minor complaint on a test scan, like Apache version being reported by some server, so they just try to score some money for nothing.