LokiBot After a Decade: An Analysis of a Recent LokiBot Campaign

Reported 24 Jun 2026 by otx · Severity: medium

LokiBot, an infostealer first advertised in May 2015, continues to operate after more than a decade with numerous variants. The malware targets credentials from over a hundred software products including browsers, cryptocurrency wallets, password managers, email and FTP clients.