Often these aren't hackers, these are organizers of the process, or, simply put, “businessmen”. Stolen credentials and residential proxies come from one crowd,

Often these aren't hackers, these are organizers of the process, or, simply put, “businessmen”. Stolen credentials and residential proxies come from one crowd, local resellers come from another crowd, etc. Also, you've believed in “traces” found by clever detectives only because it was hinted at. I suppose that most of the data comes from snitches, arrested users, and hacks, then gets washed and presented as “found” by some “service”. What Krebs is suspiciously silent about is who provided (il)legal protection for the service. I guess this type of dirt on Russian officials is collected to a different folder inaccessible without clearance. Hence the framing of the lone Robin Hood story.