| Azorult | homieshing.temp.swtest.ru/panel/admin.php | 77.222.62.31 | 01-02-2020 |
| Azorult | appeq.000webhostapp.com/panel/admin.php | 145.14.145.219 | 01-02-2020 |
| Nexus | f0392044.xsph.ru/ | 141.8.192.151 | 01-02-2020 |
| Nexus | 46.229.215.127/ | 46.229.215.127 | 01-02-2020 |
| Predator | mine.kommanditgesel.icu/login | 45.95.168.70 | 01-02-2020 |
| Pony | pnny.kommanditgesel.icu/news/plast/admin.php | 45.95.168.70 | 01-02-2020 |
| Pony | kayfundz.ru/kay/eng/admin.php | 31.41.43.1 | 01-02-2020 |
| Pony | pa-buol.go.id/wp/panelnew/admin.php | 103.229.72.168 | 01-02-2020 |
| Nexus | 185.178.46.57/ | 185.178.46.57 | 01-02-2020 |
| Predator | ildar-mael-ru.myjino.ru/login | 81.177.135.12 | 31-01-2020 |
| Lokibot | everest--sh.com/cream/five/PvqDq929BSx_A_D_M1n_a.php | 85.117.234.217 | 31-01-2020 |
| Lokibot | sino-spriulina.com/demo1/Panel/PvqDq929BSx_A_D_M1n_a.php | 95.163.212.79 | 31-01-2020 |
| AgentTesla | nortonlilly.info/boss/login.php | 95.163.212.79 | 31-01-2020 |
| Kpot | tonitrus.pw/3AX3AsO58eVAwtrm/login.php | 47.90.215.148 | 31-01-2020 |
| Oski | tonitrus.pw/login.php | 47.90.215.148 | 31-01-2020 |
| Oski | sadurtmjpsad.pw/login.php | 45.135.164.204 | 31-01-2020 |
| Oski | pica5sopablo.pw/login.php | 109.196.164.171 | 31-01-2020 |
| Oski | gerawest.xyz/login.php | 46.17.175.204 | 31-01-2020 |
| Predator | f0386523.xsph.ru/login | 141.8.192.151 | 31-01-2020 |
| Predator | hxxp://f0387404.xsph.ru/login | 141.8.192.151 | 31-01-2020 |
| Borr | hypercleaner.su/auth.php | 185.178.208.176 | 31-01-2020 |
| Borr | a0394611.xsph.ru/auth.php | 141.8.192.46 | 31-01-2020 |
| Lokibot | gpi-q.com/copy/five/PvqDq929BSx_A_D_M1n_a.php | 194.67.93.143 | 31-01-2020 |
| Lokibot | gpi-q.com/craks/five/PvqDq929BSx_A_D_M1n_a.php | 194.67.93.143 | 31-01-2020 |
| Lokibot | expertisem.net/agutaz/direct/pushin/PvqDq929BSx_A_D_M1n_a.php | 95.163.212.79 | 31-01-2020 |