[rms]

If you can stage an attack like this, you can steal credit card numbers or phish your way to a Paypal account

[tptacek]

Not that it matters (I'm sure if they're actually paying for VM's they're using stolen cards), but you can trade cash for anonymous credit card numbers in a number of places. Simplest example: Google "Vanilla VISA".