I have heard some in the podcasting community wonder about the claims made by Resecurity. They say that there are doubts in Resecurity's disclosure and they say that the company has only a few employees. One person claims that the website for Resecurity was originally built from a Russian IP address.
It just seems odd that Resecurity has provided attribution so quickly.