| AgentTesla | willyprocessequipments.com/medias/webpanel/login.php | 38.114.114.125 | 20-06-2020 |
| Oski | thekurva.xyz/login.php | 172.67.161.127 | 20-06-2020 |
| Oski | 89.223.123.36/login.php | 89.223.123.36 | 19-06-2020 |
| Lokibot | ygsddl1.tk/white/five/PvqDq929BSx_A_D_M1n_a.php | 104.27.176.168 | 19-06-2020 |
| Kpot | 37.46.129.18/BCCBVPu8yEHdyZb9/login.php | 37.46.129.18 | 19-06-2020 |
| AgentTesla | forepointmachinery.com/donttouch/webpanel/login.php | 38.114.114.70 | 19-06-2020 |
| Amadey | 188.120.233.19/bF2dmb4d/login.php | 188.120.233.19 | 19-06-2020 |
| Oski | 199.192.24.69/b2kYUOYBvbk22/login.php | 199.192.24.69 | 19-06-2020 |
| Predator | valentinogods.zzz.com.ua/login | 95.211.16.66 | 19-06-2020 |
| Taurus | 64.225.22.106/#/login | 64.225.22.106 | 18-06-2020 |
| Lucifer | solarparkcleaning.co.uk/js/webpanel/Panel/login.php | 192.124.249.17 | 18-06-2020 |
| Lokibot | t-mk.me/ig2/PvqDq929BSx_A_D_M1n_a.php | 185.185.69.74 | 18-06-2020 |
| Lokibot | chelitos.com.ve/wp-admin/wp-admin/cache/five/PvqDq929BSx_A_D_M1n_a.php | 192.210.150.19 | 18-06-2020 |
| Lokibot | hoist.cloudns.asia/hoist/logs/omc.php | 193.142.59.118 | 18-06-2020 |
| Lokibot | skullisland.ml/Darren/PvqDq929BSx_A_D_M1n_a.php | 172.67.215.167 | 18-06-2020 |
| Lokibot | skullisland.ml/Slim/PvqDq929BSx_A_D_M1n_a.php | 172.67.215.167 | 18-06-2020 |
| Lokibot | skullisland.ml/Pablo/PvqDq929BSx_A_D_M1n_a.php | 172.67.215.167 | 18-06-2020 |
| Lokibot | skullisland.ml/Primus/PvqDq929BSx_A_D_M1n_a.php | 172.67.215.167 | 18-06-2020 |
| Lokibot | skullisland.ml/Arinze/PvqDq929BSx_A_D_M1n_a.php | 172.67.215.167 | 18-06-2020 |
| Predator | f0447317.xsph.ru/login | 141.8.192.151 | 18-06-2020 |
| Lokibot | reiangkor.com/uploads/images/Gallery/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 209.99.16.199 | 18-06-2020 |
| Lokibot | sbqlobalfoods.com/rich/Panel/PvqDq929BSx_A_D_M1n_a.php | 185.185.69.74 | 18-06-2020 |
| Lokibot | clemglobal.com/bless/five/PvqDq929BSx_A_D_M1n_a.php | 185.185.69.74 | 18-06-2020 |
| Lokibot | t-mk.me/work1/PvqDq929BSx_A_D_M1n_a.php | 185.185.69.74 | 18-06-2020 |
| Lokibot | clemglobal.com/virofile/five/PvqDq929BSx_A_D_M1n_a.php | 185.185.69.74 | 18-06-2020 |