I have a few ideas.

1. We've entered the full on "Oh shit, you don't need to be a hacker to do computer crime" phase of computer crime. Smash and grabs, just pay some disgruntled employee for their credentials, hire people to do the tech bits you need done - you don't have to be a 1337 hacker to get involved with this stuff. So they may not care or even be aware of much forum opsec.

2. Does Russia care about Russians ripping off other countries? How hard do you have to try to hide it if you just dump the username and move on when you're found out because there's not any repercussions from local law? I don't think anybody is going to go to Russia and get them any time soon.