[thefreeman]

We have no idea if that is the only address they are getting paid on, so this is kind of misleading.

[willstrafach]

Those who have examined the publicly available malware samples have stated this address as the only one used at the moment. It is certainly possible that an upgraded variant may use others though.

[franciskim]

Well, true. If you guys can report alternate addresses I can add it... but about to sleep now tho.