Hmmmm,

framing someone that already has a record for computer crime, by releasing malware using their name/handle.
Would they really use their previous ID?