I think the article is too short to answer this question: the buyer claims to be sharing the data with Have I Been Pwnd, does that not indicate they are not a threat actor? Or at least a grey hat of some kind?
Actually, the article says that Raccoon is the threat actor, but the linked tweet says they are the buyer? Or does the tweet refer to itself in the third person, by claiming to be the buyer, which makes Raccoon the seller?
I think the article is too short to answer this question: the buyer claims to be sharing the data with Have I Been Pwnd, does that not indicate they are not a threat actor? Or at least a grey hat of some kind?
Actually, the article says that Raccoon is the threat actor, but the linked tweet says they are the buyer? Or does the tweet refer to itself in the third person, by claiming to be the buyer, which makes Raccoon the seller?
What’s going on with this article??
the way I read it is this Raccoon guy A. sold the data to a single buyer but then B. also handed it over to have I been pwned.