US authorities punish sellers of malware and spyware