| DiamondFox | xrussianhitman.xyz/panel/index.php | 8.211.6.123 | 04-05-2021 |
| Lokibot | optimize-apiv2.barantum.com/xx/Panel/PvqDq929BSx_A_D_M1n_a.php | 113.20.29.235 | 04-05-2021 |
| BlackNet | mozillabgsvc.com/login.php | 64.120.89.238 | 04-05-2021 |
| Oski | 198.98.49.140/login.php | 198.98.49.140 | 04-05-2021 |
| Amadey | 92.38.184.216/4dcYcWsw3/login.php | 92.38.184.216 | 04-05-2021 |
| Collector | f0538386.xsph.ru/ | 141.8.193.236 | 04-05-2021 |
| Collector | f0524225.xsph.ru/ | 141.8.193.236 | 04-05-2021 |
| Collector | f0537341.xsph.ru/index.php?auth | 141.8.193.236 | 04-05-2021 |
| Lokibot | blemblem.us/dumbo/dumbo1/PvqDq929BSx_A_D_M1n_a.php | 185.212.131.80 | 03-05-2021 |
| Lokibot | kushikushi.us/dumbo/dumbo4/PvqDq929BSx_A_D_M1n_a.php | 185.212.131.80 | 03-05-2021 |
| AgentTesla | 103.133.105.179/3838/login.php | 103.133.105.179 | 03-05-2021 |
| Lokibot | finacafe.net/OG/news/school/boy/choo/PvqDq929BSx_A_D_M1n_a.php | 103.74.123.18 | 03-05-2021 |
| Amadey | 45.155.205.172/4dcYcWsw3/login.php | 45.155.205.172 | 03-05-2021 |
| Oski | bestbundledealer.com/login.php | 95.216.102.241 | 03-05-2021 |
| Pony | 31.210.21.236/tele/yfhghdddtsc/dfreert/admin.php | 31.210.21.236 | 03-05-2021 |
| Collector | cx48626.tmweb.ru/ | 185.114.247.102 | 03-05-2021 |
| Oski | 205.185.120.57/login.php | 205.185.120.57 | 03-05-2021 |
| Collector | f0529228.xsph.ru/ | 141.8.193.236 | 03-05-2021 |
| AgentTesla | www.gulfgrating.com/danky/login.php | 209.124.66.16 | 03-05-2021 |
| Lokibot | manvim.co/fb15/PvqDq929BSx_A_D_M1n_a.php | 47.91.76.92 | 03-05-2021 |
| Oski | 31.210.21.181/login.php | 31.210.21.181 | 02-05-2021 |
| Collector | antimalwarebyte.site/ | 185.22.155.64 | 02-05-2021 |
| Collector | f0528737.xsph.ru/ | 141.8.193.236 | 01-05-2021 |
| Lokibot | fleximexi.ir/ari/Panel/PvqDq929BSx_A_D_M1n_a.php | 31.210.21.248 | 01-05-2021 |
| BlackNet | www.mozillabgsvc.com/login.php | 64.120.89.238 | 01-05-2021 |