The man behind the handle "Kusok" and others allegedly exploited a vulnerability in a remote access program to steal personal information and use it to file for bogus tax refunds.