Krebsonsecurity reporting suggests that the "cyber security firm" is actually part of a gang of cyber criminals. Story submitted (but flagged and dead) here:

https://news.ycombinator.com/item?id=42979187