So you were able to confirm that this was not a Russian based cyber crime group?

Doesn't the Russian Government tolerate or even encourage them, as long as they don't target Russian enterprises, pay their look the other way bribes, and do as they are told when the "strong men" show up on their door step and tell them to use their skills to accomplish something the Government wants done, and wants to be able to avoid being directly involved with?