DHS investigators tracked the scheme from Adobe and Microsoft registration codes stolen in Germany, Singapore and China to online sellers in five US states.