All of this smells like a prosecutor wanting a big case hit so he can advance his career.
All cyber-security firms said they never got hits for Kronos or UPAS-Kit.
The first Kronos detections came after his arrest. Go figure that! How do you charge someone for developing malware that never infected anyone?