1. Spy on researchers, harvest 0-days before they're published, monetize them (selling 0-days, spreading ransomware, etc), 2. Sell info/research to publish academic research before the victim does, 3. geopolitical leverage, 4. blackmail researchers to get more of the above, 5. use 0-days found by others for global dragnet surveillance, which translates to money and political power, 6. plant (dormant) code in critical infrastructure internationally for geopolitical leverage / future war. 7. inject any code into any repo that the researchers have access to or that the researchers are known to make use of (tools), 8. economic espionage / accesss to high-tech international IP

Just kind of what the NSA does really with the exception of monetizing on ransomware?