"He was like a fireman starting the fire so he could get paid for putting it out," said Krebs, an expert on cybersecurity issues with deep contacts on the darkweb. Krebs was the first to smoke out Jha's identity after a four-month investigation published on his site in January. "When you attack journalists, they tend to write about it."