Skip to content

Hide Navigation Hide TOC

LokiBot (fbda9705-677b-4c5b-9b0b-13b52eff587c)

LokiBot is a banking trojan for Android 4.0 and higher. It can steal the information and send SMS messages. It has the ability to start web browsers, and banking applications, along with showing notifications impersonating other apps. Upon attempt to remove it will encrypt the devices' external storage requiring Bitcoins to decrypt files.

Cluster A Galaxy A Cluster B Galaxy B Level
LokiBot (fbda9705-677b-4c5b-9b0b-13b52eff587c) Android LokiBot (4793a29b-1191-4750-810e-9301a6576fc4) Malpedia 1
LokiBot (fbda9705-677b-4c5b-9b0b-13b52eff587c) Android Loki Password Stealer (PWS) (b8fa5036-813f-4887-b4d4-bb17b4a7eba0) Malpedia 1