Looks like some guys did further research:

http://www.sentinelone.com/rombertik-malware-wipes-the-master-boot-record-2/