The certainty of guilt aside - I applaud this calculated risk as the alternative relegates the perpetrators to anonymous status ("russian hackers") which negates the gravity of their actions.

Personalizing the scammers makes this situation "real" and while it may not lead to an arrest, it will at least give a precedent for how to handle (or maybe not?) those deemed "above the law" because of their nationality or physical location (outside the US).