[broupannoiffuto]

Accessing netflow data "leaked" by ISPs as to who communicates with who ?

Running botnets of infected machines in order to see what certain bad actors from APTs may be doing, where they could be trying to get hired, etc ?

[ajross]

None of that is alleged in the linked article...

[poopiokaka]

Is that supposed to be a counter point to something? It’s relevant and related capability by orgs in the industry that the article mentions.