It would be wrong if they picked people out of a crowd to try to convince them to use the hack, and then punished them for being persuadable. Placing a traceable hack on a website where people specifically go to download hacks already would actually be a very sensible sting operation.