Starting from early July, we have seen malicious spam activity that has targeted corporate mailboxes. The messages discovered so far contain an attachment with aniso extension that Kaspersky Lab solutions detect as Loki Bot. The malwares key objective is to steal passwords from browsers, messaging applications, mail and FTP clients, and cryptocurrency wallets. Loki Bot dispatches all its loot to the malware owners. The emailed messages were notably diverse: fake emails from well-known corporations. Fake notifications containing financial documents containing invoices, transfers, payments, etc.”]
Source: https://securelist.com/loki-bot-stealing-corporate-passwords/87595/