The notorious BreachForums seem to have returned, but the question is: who’s pulling the strings?