You put the "cracked" version on torrent sites today. Back then there were just as well known distribution sites.

You have to think that intelligence agencies have people inside hacking groups, giving backdoored hacked products a sheen of legitimacy.