Well, EU does have a lot of initiatives pushing for a 'single digital market' without borders/barriers; Romania is (has to be) treated as a domestic supplier.
Or maybe regulations for development and trade of computer viruses are lower in Romania and there's less paperwork to make one without risk of another government wanting to claim the works, like it would happen in other cheaper countries, China or India.
Classic Bavaria.