Hackers using Drake’s kiki do you love me to drop Lokibot malware

Hackers using Drake’s kiki do you love me to drop Lokibot malware

It is no surprise that hackers use songs as bait to spread malware, but their song choice is debatable. 


According to a report from cybersecurity firm AppRiver, a hacker going by the online handle of Master X is exploiting lyrics of Drake’s very popular song “In My feelings- Kiki Do You Love Me” to drop PowerPoint malware.


In their campaign, the hacker hides the lyrics in a PowerShell script and uses PowerPoint to spread two of the most malicious malware Azorult and Lokibot. The hacker then manually selects which malware is to be dropped on which user.


See: Infected WAV files can install malware & cryptominers on PCs


For your information, Azorult is a RAT (remote access Trojan) that can infect any computer successfully while Lokibot is a data-stealing malware. Azorult was previously found targeting thousands of Magneto sites and spreading PayPal themed banking malware

Lokibot, on the other hand, is capable of converting itself into full flagged ransomware. The malware was found targeting Android and using ISO image files to spread its infection.


According to AppRiver’s hackers using drake lokibot malware