| Azorult | riascos.org/cjay/32/panel/admin.php | 62.210.162.79 | 12-10-2019 |
| AgentTesla | callvaxglobal.com/login.php | 185.112.248.43 | 12-10-2019 |
| Lokibot | goriaya.com/ddku/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| AgentTesla | data-startssllink.com/new/login.php | 206.217.131.238 | 12-10-2019 |
| AgentTesla | magnaki.com/webpanel/login.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | halwaja.com/ckclientfolder/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | halwaja.com/oghenoke/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | halwaja.com/zxfghshjvdbjsngfhrgdjmh/zdxfgf/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | halwaja.com/dxgfcfhxs/popo/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | bakrakhada.com/rose/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| Lokibot | jhpipaa.com/doc/PvqDq929BSx_A_D_M1n_a.php | 206.217.131.238 | 12-10-2019 |
| AgentTesla | www.milonestlevevy.com/webpanel/login.php | 206.217.131.238 | 12-10-2019 |
| AgentTesla | sindevil.com/webpanel/login.php | 185.112.248.43 | 12-10-2019 |
| AgentTesla | forteol.com/webpanel/login.php | 164.68.102.240 | 12-10-2019 |
| BetaBot | gayaju.com/Panel17/login.php | 111.90.142.117 | 12-10-2019 |
| Kpot | gayaju.com/O0SYQ1VJ6mHPuotw/login.php | 111.90.142.117 | 12-10-2019 |
| Predator | 185.251.38.186/login | 185.251.38.186 | 12-10-2019 |
| AgentTesla | aaatechh.com/l/webpanel/login.php | 185.11.145.5 | 12-10-2019 |
| Predator | dd00nnzkndd.net/login | 161.117.86.100 | 12-10-2019 |
| Predator | f0337965.xsph.ru/login | 141.8.192.151 | 12-10-2019 |
| Predator | f0336067.xsph.ru/login | 141.8.192.151 | 12-10-2019 |
| Predator | f0336825.xsph.ru/login | 141.8.192.151 | 12-10-2019 |
| Predator | f0332771.xsph.ru/login | 141.8.192.151 | 12-10-2019 |
| Predator | f0339905.xsph.ru/login | 141.8.192.151 | 12-10-2019 |
| Predator | f0336944.xsph.ru/login | 141.8.192.151 | 12-10-2019 |