Well, this is an interesting business model in order to appear a little bit less dark when selling undisclosed vulnerabilities:

http://www.lssec.com/charity.html

Roger