[jcol]

Entirely agree with you. They are nothing but script kiddies. Anyone can download Metasploit, Nessus, Nikto, etc. and test for thousands of vulnerabilities. Then they either turn vulnerable servers into botnet zombies or steal their data and post it on the web. I've seen no sign they have any 0day exploits (which would make them the real deal), just some basic SQL injections, XSS, and brute forcing.

Not impressed.

[rufibarbatus]

What should be impressive at this point is that we're still not past SQL injections and XSS. Or URL tweaking. In banking. (Good God!...)