12,993 panels tracked Export All CSV
Malware Family URL IP Address First Seen
Amadey screenshot 31.41.244.237/jg94cVd30f/Login.php RU 31.41.244.237 08-12-2022
Gomorrah screenshot hasidic-lettering.000webhostapp.com/Panel.Gomorrah/Panel/login.php NL 145.14.145.148 08-12-2022
Aurora screenshot 162.55.126.111/auth DE 162.55.126.111 08-12-2022
BatLoader screenshot updatecloudservice1.com/t1s1j1/index/login RU 31.31.199.253 07-12-2022
Aurora screenshot 185.106.93.245/auth RU 185.106.93.245 07-12-2022
Aurora screenshot 135.181.197.26/auth FI 135.181.197.26 07-12-2022
Aurora screenshot 185.17.0.138/auth RU 185.17.0.138 07-12-2022
Aurora screenshot 80.92.204.59/auth DE 80.92.204.59 07-12-2022
Aurora screenshot 82.115.223.138/auth NL 82.115.223.138 07-12-2022
Aurora screenshot 185.239.239.194/auth DE 185.239.239.194 07-12-2022
ModernLoader screenshot 62.204.41.235/AVA/ RU 62.204.41.235 07-12-2022
Lokibot screenshot sempersim.su/gm12/PvqDq929BSx_A_D_M1n_a.php US 109.206.243.141 05-12-2022
Amadey screenshot 62.204.41.6/p9cWxH/Login.php RU 62.204.41.6 03-12-2022
Collector screenshot kodeinri.beget.tech/ RU 87.236.19.211 03-12-2022
Grandoreiro screenshot 185.191.228.227/autorizar.php US 185.191.228.227 03-12-2022
Grandoreiro screenshot 192.95.6.196/23112022new/autorizar.php CA 192.95.6.196 03-12-2022
BatLoader screenshot installationsoftware1.com/0ssdt1/index/login RU 95.163.237.12 02-12-2022
Aurora screenshot 45.15.156.140/auth NL 45.15.156.140 01-12-2022
Lokibot screenshot julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php US 172.64.80.1 01-12-2022
Lokibot screenshot julypc.ml/PWS/PvqDq929BSx_A_D_M1n_a.php US 172.64.80.1 01-12-2022
Amadey screenshot 31.41.244.167/v7eWcjs/Login.php RU 31.41.244.167 01-12-2022
Lokibot screenshot 208.67.105.161/k9/five/PvqDq929BSx_A_D_M1n_a.php US 208.67.105.161 01-12-2022
Collector screenshot 45.137.64.40/ NL 45.137.64.40 01-12-2022
AgentTesla screenshot 185.246.220.133/rone/login.php BG 185.246.220.133 01-12-2022
AgentTesla screenshot dropbuyinc.ga/xplor/login.php BG 185.246.221.154 01-12-2022