We are seeing this already
Great comment. I am one of the co-authors of the paper. Indeed we have already started seeing domain names generated as a combination of two english language words in Storm. More details are in this article on Dark Reading: http://www.darkreading.com/insiderthreat/security/vulnerabilities/showArticle.jhtml?articleID=228200254