Researchers examine English- and Russian-language underground exploits to track how exploits are advertised and sold.