LokiBot trojan malware campaign comes disguised as a popular game launcher

guest · Feb 17, 2020

LokiBot trojan malware campaign comes disguised as a popular game launcher
February 17, 2020
https://www.zdnet.com/article/new-l...n-comes-disguised-as-a-popular-game-launcher/

LokiBot trojan malware first emerged in 2015 and remains very popular among cyber criminals as a means of creating a backdoor into infected Windows systems.

Now a new LokiBot campaign is attempting to infect users by impersonating the launcher for Epic Games, the developer behind highly popular online multiplayer video game Fortnite.
This newly uncovered LokiBot campaign has been discovered and detailed by cyber security researchers at Trend Micro, who note that it uses an unusual installation routine to help avoid detection by antivirus software.

The C# source code is heavily obfuscated, containing portions of junk code that don't mean anything but allow the LokiBot installer to bypass any security measures on the machine.
Once inside the system, the .NET file reads and complies the C# code, before decrypting it and executing LokiBot itself on the infected machine.
Click to expand...

This latest version of LokiBot suggests that the malware will remain a threat for some time to come.

"Consistently among the most active infostealers in the wild, these tweaks to its installation and obfuscation mechanisms indicate that LokiBot is not about to slow down in the near future," Trend Micro researchers wrote in a blog post.
Click to expand...

Trend Micro: LokiBot Impersonates Popular Game Launcher and Drops Compiled C# Code File

Minimalist · Apr 3, 2020

Spearphishing Campaign Exploits COVID-19 To Spread Lokibot Infostealer

Researchers have discovered threat actors once again capitalizing on the COVID-19 pandemic and current attention on the World Health Organization (WHO) with a new spearphishing email designed to spread the LokiBot trojan sent using the WHO trademark as a lure.
Click to expand...

https://threatpost.com/spearphishing-campaign-exploits-covid-19-to-spread-lokibot-infostealer/

Log in or Sign up

LokiBot trojan malware campaign comes disguised as a popular game launcher

guest Guest

Minimalist Registered Member

Log in or Sign up

LokiBot trojan malware campaign comes disguised as a popular game launcher

guest Guest

Minimalist Registered Member

Useful Searches