A hacker has revealed that a Russian software company is behind a security scam to take money from spam and botnets.