You already reported the story in January, the only difference this time is that someone from an online cowboy agency has rinsed and repeated what you already said!

See "Phishing coders hook clueless crooks".

"..For 'tis the sport to have the enginer

Hoist with his own petard,.."

(Shakespeare)

Maybe you should report that this two so called 'security researchers' broke just as many laws as their targets.