'Tigger' trojan keeps security researchers hopping