| Amadey | 185.215.113.101/gb9fskvS/login.php | 185.215.113.101 | 13-09-2021 |
| AgentTesla | 31.220.2.120/~goobuyjp/tem/login.php | 31.220.2.120 | 12-09-2021 |
| AgentTesla | cleveropame.ydns.eu/wikema/login.php | 202.55.134.93 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-qwerty2/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | lametopvxry.ydns.eu/omkail/login.php | 202.55.134.93 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-dawn/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | bot.statusupdate.one/webpanel-charles/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-qwerty/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-muti/login.php | 69.174.100.168 | 12-09-2021 |
| Amadey | parasitevhs.xyz/PmVc3sOf/login.php | 91.219.60.60 | 12-09-2021 |
| Amadey | 185.215.113.202/PmVc3sOf/login.php | 185.215.113.202 | 12-09-2021 |
| Amadey | 185.215.113.206/k8FppT/login.php | 185.215.113.206 | 12-09-2021 |
| Amadey | css.tipinfolist.xyz/f5dkvdSbC/login.php | 45.76.173.101 | 12-09-2021 |
| Amadey | depressionk1d.ug/k8FppT/login.php | 178.208.83.45 | 12-09-2021 |
| Amadey | 91.241.19.49/hBugs2D/login.php | 91.241.19.49 | 12-09-2021 |
| Amadey | tech-unions.com/f6vskbW/login.php | 185.117.75.111 | 12-09-2021 |
| Collector | f0579172.xsph.ru/ | 141.8.192.151 | 12-09-2021 |
| Vertex | 195.2.93.37/admin/login.php | 195.2.93.37 | 12-09-2021 |
| Collector | f0567304.xsph.ru/ | 141.8.193.236 | 12-09-2021 |
| Amadey | bugmenot.site/bPwsAq2/login.php | 185.117.90.215 | 12-09-2021 |
| Amadey | arbitrarycode.site/bPwsAq2/login.php | 185.117.90.215 | 12-09-2021 |
| Amadey | adminstatus.site/bPwsAq2/login.php | 185.117.90.215 | 12-09-2021 |
| Colibri | teledata.top/panel/login.php | 46.17.47.110 | 11-09-2021 |
| Lokibot | checkvim.com/ga10/PvqDq929BSx_A_D_M1n_a.php | 45.130.146.32 | 11-09-2021 |
| Lokibot | davidmorgann.com/LOLO/five/PvqDq929BSx_A_D_M1n_a.php | 72.167.85.63 | 10-09-2021 |