New .NET Malware Conceals Lokibot Inside PNG/BMP Files to Bypass Detection

Cyberpress • November 19, 2025

Share: View original

Lokibot malware - A new variant of a .NET steganographic loader has emerged, using advanced evasion tactics to deliver the Lokibot.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New .NET Malware Conceals Lokibot in Image Files to Evade Detection A new strain of .NET malware has been identified that embeds Lokibot malware within PNG and BMP files, allowing it to bypass traditional detection methods. This sophisticated technique poses risks to users who may unknowingly download infected image files. The malware targets various systems, leveraging the common use of image formats to evade security measures. 3 sources 40

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Steganography T1027 - Steganography