Candiru, aka Sourgum, allegedly sells the DevilsTongue surveillance malware to governments around the world.
Threatpost