Microsoft brought their concerns to the FBI in July, after their own corporate investigators tagged him as leaking the Windows 8 code. Kibkalo is said to have admitted giving the info to the blogger, after meeting in an online forum.
Kibkalo worked for Microsoft in Russia and Lebanon. The Activation Server SDK was spread around with the ultimate goal of having developers reverse engineer the code and easily crack the protection on Microsoft products. In September, 2012, the blogger sent the SDK to a Microsoft employee to have it verified for authenticity. The employee went right to a supervisor who notified corporate investigations.
Supposedly, the blogger tried to protect his identity using a new Hotmail account and fake details, but the investigators were able to find an email from Kibkalo in which there were links to Windows 8 code, well before the release of the operating system. The investigators were also able to recover IMs between the two. When the blogger noted that leaking the OS would be illegal, Kibkalo is alleged to have messaged "I know :)"