Loup

Malware type
trojan
Profile updated
2026-07-07 15:10:10

Targeted industries: financial-services

Context

Frank Boldewin describes Loup as a small cli-tool to cash out NCR devices (ATM).

Detection coverage

  • 3 YARA rules

Detection rules

  • SIGNATURE_BASE_ATM_Malware_Loup_1 (yara-rule)
  • R3C0NST_ATM_Malware_Loup (yara-rule)
  • MALPEDIA_Win_Loup_Auto (yara-rule)

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Loup (report)
  • twitter.com — 1295396936896438272 (report)
  • twitter.com — 1295275546780327936 (report)

External references