Comment by Nextgrid

Just curious, how do these illegitimate keys get obtained to begin with? Is it some kind of payment fraud where keys are obtained through fraud and the payments then get reversed? If so why don't the keys get invalidated when the associated payment is disputed?