Damballa released a follow-up statement to defend its findings after a number of security professionals questioned the validity of its claims.