This is how government spyware StrongPity uses security researchers' work against them