Anubis Loader
Aliases: Kraken, Pepega
- First seen
- 2021-10-01 00:00:00
- Malware type
- loader
- Family
- Malware family
- Last IoC activity
- 2026-07-20 01:16:53
- Profile updated
- 2026-07-07 14:44:43
Targeted industries: financial-services retail-and-hospitality technology-and-telecommunications
Context
A loader written in Go, tracked since at least October 2021 by ZeroFox. Originally named Kraken and rebranded to Anubis in February 2022.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Anubis Loader (report)
- windowsreport.com — Kraken Botnet (report)
- medium.com — Privateloader To Anubis Loader 55D066A2653E (report)
- bleepingcomputer.com — New Golang Botnet Empties Windows Users Cryptocurrency Wallets (report)
- zerofox.com — Quick Update Kraken Completes Its Rebrand To Anubis (report)
- zerofox.com — Meet Kraken A New Golang Botnet In Development (report)