this is probably the right answer. hacking group getting a 0day to sell to nation states on a per-use agreement.