Awake Security linked the spyware to Galcomm, an Israeli web-hosting company. The company refuted parts of Awake's report, saying 25% of the domains Awake checked were not Galcomm domains, but said little about the other 75%. Google says all the extensions flagged by Awake have since been removed.
Source