It seems like he may not have created the trojan, but simply created a bootkit that it utilized. A fairly common thing for security researchers to do.