Bolek
Aliases: KBOT
- First seen
- 2014-01-01 00:00:00
- Malware type
- botnet, trojan
- Family
- Malware family
- Last IoC activity
- 2026-06-24 01:06:39
- Profile updated
- 2026-07-07 14:50:10
Targeted industries: financial-services
Targeted regions: country_code:ru country_code:pl
Context
Bolek, also known as KBOT, is a banking trojan that primarily targets financial institutions in Eastern Europe, particularly in Russia and Poland. It is known for its ability to create botnets for financial gain.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Bolek_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Bolek (report)
- lokalhost.pl — Newest Addition To Happy Family Kbot.17.05.2015.Txt (report)
- cert.pl — 11379 (report)
- Kaspersky — 96157 (report)