https://www.wired.com/story/github-malware-spreading-network-stargazer-goblin/
Cybersecurity researchers have spotted a 3,000-account network on GitHub that is manipulating the platform and spreading ransomware and info stealers.
I think this is a better fit in cybersecurity where you cross-posted it, since it's more related to hacking than piracy. But it's still an interesting read :)
they estimate the operator made around $8,000.
the network could have started operating as early as August 2022 and may have made as much as $100,000
I know very little about this stuff but it seems to me that if it is a Russian as implied, it looks like a lot of work for that amount of pay off.
The real money could well be from the use of the tools being sold, rather than all this paid for distribution. But then why not just do that?
Or, as seems most likely to me, there is another, less fiscal reason for the activity. Russian state backed hackers exist.