| AgentTesla | www.threahingweath.com/login.php | 199.188.205.46 | 10-06-2021 |
| Amadey | 94.140.115.70/construction/login.php | 94.140.115.70 | 10-06-2021 |
| Collector | f0550798.xsph.ru/ | 141.8.193.236 | 10-06-2021 |
| GrimAgent | microsoftltdcorp.com.pl/login.php | 8.208.126.243 | 10-06-2021 |
| Zeus | 212.192.241.97/~botboyz/zs//cp.php?m=login | 212.192.241.97 | 10-06-2021 |
| EvilBear | 212.192.241.97/~matixcf/panel/login.php | 212.192.241.97 | 10-06-2021 |
| EvilBear | 212.192.241.97/~plexic/login.php | 212.192.241.97 | 10-06-2021 |
| LiteHTTP | captinads.com/min4/login/ | 63.141.229.42 | 10-06-2021 |
| Collector | a0549610.xsph.ru/ | 141.8.195.33 | 10-06-2021 |
| Oski | 212.192.241.91/login.php | 212.192.241.91 | 08-06-2021 |
| LiteHTTP | captinads.com/min3/login/ | 67.211.219.228 | 07-06-2021 |
| LiteHTTP | captinads.com/min/login/ | 67.211.219.228 | 07-06-2021 |
| Lokibot | brokenpipes.ga/Bn4/PvqDq929BSx_A_D_M1n_a.php | 172.67.152.37 | 07-06-2021 |
| Collector | f0549389.xsph.ru/ | 141.8.193.236 | 07-06-2021 |
| EvilBear | matix.cf/panel/login.php | 212.192.241.97 | 07-06-2021 |
| Collector | f0549248.xsph.ru/ | 141.8.192.151 | 07-06-2021 |
| Oski | 91.198.123.38/tsc/login.php | 91.198.123.38 | 07-06-2021 |
| Cypress | cd05491.tmweb.ru/ | 185.114.247.102 | 07-06-2021 |
| LiteHTTP | captinads.com/min2/login/ | 67.211.219.228 | 07-06-2021 |
| BlackNet | lolyouhacked.ddns.net/blacknetpanel/login.php | 45.138.72.239 | 07-06-2021 |
| LittleThief | www.mibbpersonales.com/tacabamba/index.php | 107.178.112.38 | 06-06-2021 |
| Amadey | l83b616b.justinstalledpanel.com/Hnq8vS/login.php | 176.111.174.114 | 06-06-2021 |
| Collector | f0549433.xsph.ru/ | 141.8.193.236 | 06-06-2021 |
| Oski | califood.net/login.php | 192.185.26.241 | 06-06-2021 |
| Collector | a0546096.xsph.ru/ | 141.8.192.169 | 06-06-2021 |