Can this host mitigate procedures used in LokiBot malware?
Tactic: Credential-access
CISA released an advisory in August 2022 on LokiBot malware, which can steal victims' information. This TTP emulates LokiBot's collection of browser information and stored credentials. Protection from credential dumping is essential because malware may steal account credentials to gain access to information for use in lateral movement and privilege escalation.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsEmulates LokiBot Password Stealer's procedures for credential harvesting.
Can this host mitigate procedures used in LokiBot malware?
2022-08-23
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github