The financially motivated group of malicious hackers posted screenshots that Okta said could be related to "activity" detected in January.