Researchers at the Citizen Lab say they traced a commercial spyware customer's internet protocol address to the headquarters of Ontario Provincial Police.