Local reports suggest that the hacker group was stealing money from the victim companies and diverting it to their sponsors while keeping a percentage.... in short, that the money flow was not from the Saudi group to the Filipino group, but the other way around. The alleged "links" to various organizations are not entirely clear and should be treated with skepticism.
An interesting situation, but the published information is far too vague and incomplete to reach any kind of conclusion.
Bookmarks