LokiBot
Info stealer via malspam
Source Attribution
- Origin
- MITRE
- Source
- Proofpoint
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Proofpoint · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered LokiBot first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
LokiBot is a prolific Windows info stealer distributed via malspam for credentials and browser data. (attributes recorded from Proofpoint).
Definition
LokiBot is a prolific Windows info stealer distributed via malspam for credentials and browser data.
Overview
LokiBot is a prolific Windows info stealer distributed via malspam for credentials and browser data.
Behavior
- Form-grabbing
- distributed in phishing floods
First Seen
2016-02
Target
Info stealer via malspam
Malware Intelligence
Family: LokiBot
Techniques: T1555, T1113
Targets: Info stealer via malspam
Behavior:
- Form-grabbing
- distributed in phishing floods
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.