A few naive criminals thought they were downloading a good old fashioned remote access trojan. Not so.