Derp.ca
Data by ransomware.live opens in a new tab

Loki

Loki is tracked by ransomware.live as a ransomware operation.

Profile source: Ransomware.live opens in a new tab

Loki

Family profile

Loki is tracked by ransomware.live as a ransomware operation. Public ransomware-specific technical reporting remains limited, so this profile excludes unrelated backdoor and credential-stealer families that also use the Loki name.

Operational record

1
YARA rules
1
Leak sites
0 available

Credential Theft

  • NirSoft ChromePass
  • NirSoft WebBrowserPassView

Discovery Enum

  • Advanced IP Scanner

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab