Security researchers outsmart notorious hacking crew with a clever blend of fake and real breached data-raising new questions about the ethics of digital deception.