About the language part: I'm a native speaker of Portuguese. Their posts on Reddit[1], requesting paid insiders on some mobile networks, are very clearly machine translated. When they started out, hacking the Ministry of Health here in Brazil, the defacing text had a wrong plural, and was written in a way that a native speaker never would.
If I wanted to be hard to detect, I'd run my messages through a couple machine translators so any metrics you may want to collect would be distorted enough it wouldn't be easy to tie them to your own messaging.
And that target is what made me first think of one or more government agents infiltrating and financing the group.
https://camas.github.io/reddit-search/#{%22author%22:%22okla...