The sites were used for more than a decade by cybercriminals who wanted to test malware against security tools.