Automated malware analysis of files associated with similar domains has revealed scripts that attempt to access sensitive information from local browsers or modify system registry settings to ensure the malware persists after a reboot [11].
(e.g., a bay named Mirror Bay)