[malwarebytess]

Usually for this kind of thing samples are provided. This attacks feels too sophisticated for a mere sale. At best, if this is legitimate, it's misdirection.

[jinkyu]

needs proof of life. none of the "vendors" will consider it without proof. in-fact they would likely verify if they were real dumps.