Why did you have to bring up the specific "CyberVor" incident that has been called out as bullshit by several people in the security industry?
http://krebsonsecurity.com/2014/08/qa-on-the-reported-theft-...
https://www.schneier.com/blog/archives/2014/08/over_a_billio...
As to why it may be on-topic here: the activity reported by NameCheap in the OP lines up pretty well with the reports of a large collection of compromised accounts in the hands of a criminal group.