Researchers who spent eight months digging into the scammers' techniques reveal the tools the bad guys use and the money they've made