Blocking coowon web browser code#

Most AVs (anti-virus software) identify the malware fairly well, so some authors just add a layer of packing and obfuscation to it.

Blocking coowon web browser code#

We have seen multiple variants of the malware, including a total re-write of the source code to the. They could just change the source code to their flavor and adapt it according to the circumstances. Loki’s version-1 source code was leaked around 2015, which made malware author’s lives very easy. For the last two years hackers have been selling the malware including the C&C (command and control) for a low price of around $70, which is considered cheap. In addition, to see the whole picture, Loki also implements a key-logger component that enhances its abilities to steal passwords. Loki has the capabilities of stealing many different types of credentials. Loki-Bot is a password stealer malware, which was seen in the wild most often lately. Loki is still alive and kicking years after its initial outbreak, and that teaches us that attackers still get benefit from it, even though it’s well known to the security community and it’s not an advanced or highly sophisticated threat per se. We found this interesting since it illustrates that attackers are always interested in your personal data, and especially in your credentials and passwords. Loki has been active for a few years now, and was recently seen by Kaspersky in a new spam campaign targeting corporate mailboxes.