The rar attachment contains an exe file: the malware itself. Objective: to steal information from the victim.
Cybercrime, new Lokibot campaign via false invoice
Malware Hunter JAMESWT Technical Analysis
New Lokibot campaign via false invoice. The xlsx attachment of the email contacts a url and downloads the malware. The campaign is not geofenced and there are no blacklists
New invoice-themed Lokibot campaign.
The xlsx attachment of the email contacts a url and downloads the malware.
The campaign is not geofenced and there are no blacklists. The goal of the cybercrime behind the operation is to steal sensitive information from the victim. Lokibot (aka Loki PWS and Loki-bot) is an information — stealer, which acquires credentials, cryptocurrency wallets, and other types of data.
Malware C2
Related Posts
