⤷ Title: Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 00:05:11 +0000
════════════════════════
⌗ Tags: #Malware #.NET Loader #BMP #Infostealer #Lokibot #PNG #Runtime Decryption #Splunk #steganography
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 00:05:11 +0000
════════════════════════
⌗ Tags: #Malware #.NET Loader #BMP #Infostealer #Lokibot #PNG #Runtime Decryption #Splunk #steganography
Daily CyberSecurity
Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography
Splunk uncovered a new .NET steganographic loader that hides LokiBot malware inside embedded BMP and PNG image files. The multi-stage loader uses a separate container module, evading static detection.