Loki
- First seen
- 2016-07-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-21 04:09:38
- Profile updated
- 2026-07-07 13:48:11
Targeted industries: financial-services healthcare-and-pharmaceutical retail-and-hospitality
Context
Loki is a ransomware that encrypts victims' files and demands a ransom for their decryption. It targets various industries and is known for its rapid spread and significant impact on operations if not mitigated promptly.
Reports & references
- ransomlook.io — Loki (report)
- malpedia.caad.fkie.fraunhofer.de — Apk.Loki (report)
- blog.checkpoint.com — Preinstalled Malware Targeting Mobile Users (report)