Added: DNS names from Mandiant's 02-2013 APT1 report