The group was exposed after a ShadowBrokers leak.
Source: Threadpost