| Lokibot | 194.85.248.167/imttt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 01-12-2021 |
| AgentTesla | oko1e2.xyz/login.php | 172.67.191.238 | 01-12-2021 |
| Lokibot | hdmibonquet.ir/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.67.244 | 01-12-2021 |
| Collector | idipanel.ru.xsph.ru/ | 141.8.197.42 | 30-11-2021 |
| Oski | tecnomedica.com.py/login.php | 216.172.171.133 | 30-11-2021 |
| Lokibot | secure01-redirect.net/gb17/PvqDq929BSx_A_D_M1n_a.php | 212.193.51.49 | 30-11-2021 |
| Collector | plug.com.xsph.ru/ | 141.8.197.42 | 30-11-2021 |
| AgentTesla | oko1e2.xyz/login.php | 104.21.89.239 | 30-11-2021 |
| AgentTesla | www.tecnomedica.com.py/poikmkjoiiou/login.php | 216.172.171.133 | 30-11-2021 |
| Oski | pak-rebel.com/login.php | 107.189.2.217 | 29-11-2021 |
| Collector | sosipisun.ru.xsph.ru/ | 141.8.197.42 | 29-11-2021 |
| Azorult | fastinvestmentbroker.com/junior/panel/admin.php | 185.174.174.220 | 29-11-2021 |
| Lokibot | rfsfju.xyz/blsdxx/PvqDq929BSx_A_D_M1n_a.php | 172.67.171.101 | 29-11-2021 |
| Lokibot | secure01-redirect.net/gb18/PvqDq929BSx_A_D_M1n_a.php | 212.193.51.49 | 29-11-2021 |
| Lokibot | 194.85.248.167/imtt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 29-11-2021 |
| Predator | ascariproject.atwebpages.com/login | 185.176.43.108 | 29-11-2021 |
| Collector | pentagon.info.ru.xsph.ru/ | 141.8.197.42 | 29-11-2021 |
| Lokibot | powerbankbless.xyz/aboyo/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.64.64 | 29-11-2021 |
| SupremeMiner | 144.76.84.177/panel/auth.php | 144.76.84.177 | 28-11-2021 |
| Lokibot | 194.85.248.167/imt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 28-11-2021 |
| Collector | prox201stealer.ru.xsph.ru/ | 141.8.197.42 | 28-11-2021 |
| AgentTesla | www.tecnomedica.com.py/poikmkjoiiou/login.php | 216.172.171.133 | 27-11-2021 |
| Lokibot | secure01-redirect.net/ga29/PvqDq929BSx_A_D_M1n_a.php | 212.193.50.242 | 27-11-2021 |
| Cypress | f0603504.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 27-11-2021 |
| Cypress | f0602725.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 26-11-2021 |