And hosting it on AWS too, making it extra cheeky.

However their downfall is the same way many others (including legitimate businesses) have been caught out, namely leaving it unsecured.