Security News > 2020 > September > CISA Warns of Increased Use of LokiBot Malware

The U.S. Cybersecurity and Infrastructure Security Agency is warning of a significant increase in the use of LokiBot malware over the past couple of months.

Initially detailed in 2016 as a piece of malware targeting Android devices, LokiBot arrived on Windows in 2018 and has evolved into a prevalent threat, targeting corporate mailboxes and employing innovative distribution methods.

In an alert on Tuesday, CISA warned of "a notable increase in the use of LokiBot malware by malicious cyber actors since July 2020," saying that it has detected persistent malicious activity associated with the malware.

The malware is employed by "a broad range of cyber actors across a wide variety of data compromise use cases," CISA says.

Cyber-actors, CISA reveals, typically employ LokiBot to target both Windows and Android operating systems, and also use malicious websites, text, and other private messaging services for distribution, in addition to email.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/wTk9HvSWz2E/cisa-warns-increased-use-lokibot-malware