Most of the domain names aren't used by Equation anymore, he said. But three are still active. The activity, however, doesn't lend much of a clue as to what Equation is up to these days, as the group changed its tactics in late 2013.
"Those three [domains] are very interesting," Raiu said. "We just don't know what malware is being used."
Sign up for CIO Asia eNewsletters.