Security company watchTowr has identified a backdoor installed in a hacking tool designed to install a backdoor, and revealed that it is collecting and analyzing data within the bounds of the law.