Not only should they focus on those who are openly attacking the ecosystem, but the correlation between user accounts must be well studied. Maybe we have "trojan horses" within the community that could then give us some new unpleasant surprises.