[curt15]

How does Hanlon's Razor explain the surreptitious nature of the firmware?

"Little is known about the Ragentek firmware. BitSight researchers said code in the firmware goes out of its way to conceal the presence of the underlying binary file. For example, it deliberately attempts to remain excluded from the list of running processes returned by the Linux PS command."

http://arstechnica.com/security/2016/11/powerful-backdoorroo...

[JumpCrisscross]

On the other hand, the two domains left unregistered point to stupidity over evil.

[andrewksl]

Perhaps they consider security by obscurity an acceptable technique?