| AgentTesla | pushkinorigin.ydns.eu/tanks/login.php | 85.209.134.253 | 11-11-2022 |
| AgentTesla | 85.31.46.78/br/login.php | 85.31.46.78 | 11-11-2022 |
| AgentTesla | ori.ydns.eu/ori/login.php | 41.216.183.61 | 11-11-2022 |
| AgentTesla | 80.85.156.9/boxi/login.php | 80.85.156.9 | 11-11-2022 |
| AgentTesla | 80.85.156.9/fe33l/login.php | 80.85.156.9 | 11-11-2022 |
| AgentTesla | 107.189.4.253/zipone/login.php | 107.189.4.253 | 11-11-2022 |
| AgentTesla | 107.189.4.253/unrar/login.php | 107.189.4.253 | 11-11-2022 |
| AgentTesla | 107.189.4.253/b22/login.php | 107.189.4.253 | 11-11-2022 |
| Oski | anticrack.eu/login.php | 131.226.4.15 | 07-11-2022 |
| Amadey | 176.113.115.201/3g4mn5s/Login.php | 176.113.115.201 | 05-11-2022 |
| Erbium | 77.73.133.58/panel/ | 77.73.133.58 | 04-11-2022 |
| Gomorrah | directport123.com/webpanel/Panel/login.php | 199.192.30.18 | 31-10-2022 |
| Gomorrah | myserverpot.com/root/Panel/login.php | 199.192.30.18 | 29-10-2022 |
| Gomorrah | sanjuanbot.net/root/Panel/login.php | 199.192.30.18 | 29-10-2022 |
| AgentTesla | samberii.com/wp/m/login.php | 190.123.44.244 | 29-10-2022 |
| Mars | 144.24.197.26/panel/login.php | 144.24.197.26 | 27-10-2022 |
| Mars | 135.181.168.27/tkK30UgdT6/login.php | 135.181.168.27 | 27-10-2022 |
| BatLoader | cloudupdatesss.com/t1mw0r/index/login | 194.67.119.190 | 27-10-2022 |
| BatLoader | externalchecksso.com/g5i0nq/index/login | 194.67.110.215 | 27-10-2022 |
| BatLoader | internalcheckssso.com/g5i0nq/index/login | 194.67.92.83 | 27-10-2022 |
| AgentTesla | greukrainy.duckdns.org/bliz/login.php | 171.22.30.90 | 26-10-2022 |
| AgentTesla | samberii.com/wp/m/login.php | 190.123.44.244 | 26-10-2022 |
| AgentTesla | 107.189.4.253/bidone/login.php | 107.189.4.253 | 26-10-2022 |
| AgentTesla | 195.178.120.72/fab4/login.php | 195.178.120.72 | 25-10-2022 |
| Erbium | 88.99.127.140/panel/ | 88.99.127.140 | 25-10-2022 |