The hunt for the malware that’s affected nearly a third of the US is on – and it could have all been done by a few teenagers, according to security researchers.