U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign

guest · Sep 10, 2019

U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign
September 10, 2019
https://threatpost.com/u-s-manufacturer-most-recent-target-of-lokibot-malspam-campaign/148153/

Researchers this week are warning of the most recent sighting of the malware, which was recently spotted in spam messages targeting a large U.S. manufacturing company.

Researchers first discovered the campaign on Aug. 21 after an unnamed U.S. semiconductor distributor received a spam email sent to the sales department from a potentially compromised “trusted” sender. The email, purporting to be distributing an attached request for quotation, was actually harboring prolific trojan LokiBot.

“The attack is pretty straightforward,” said Fortinet researchers in a Tuesday analysis of the attack.
Red Flags
Despite the spam email (titled “Urgent Request for Quotation #RFQE67Y54”) coming from a trusted sender, there were several tell-tale signs that might give away the email as malicious.

Once opened, the file actually harbors LokiBot malware, which is known for stealing a variety of credentials, including FTP credentials, stored email passwords, passwords stored in the browser, as well as a whole host of other credentials.
Click to expand...

Fortinet: Newly Discovered Infostealer Attack Uses LokiBot

Log in or Sign up

U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign

guest Guest

Log in or Sign up

U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign

guest Guest

Useful Searches