> The use of Ebury and the broad collection of unencrypted data point to a financially motivated crime group.

Collection of unencrypted data points to other players as well that have been known to have great interest in Tor exit nodes etc., but they're careful and not usually this noisy, so probably newgen trolls.