Comment by orf

i'm guessing it's accounts they have compromised with the stealer.