A hacker is patching Citrix servers to maintain exclusive access

FireEye believes this is a bad guy hoarding Citrix servers, rather than a good-guy vigilante looking out for organizations.