I guess it's possible he was flagged by someone reviewing malware. Would malware creators give any credits?