Vulnerability researchers were repeatedly targeted by trojanised exploits