Bobik

Description

Bobik is a trojan that spreads through network shares and infected removable drives, allowing it to move laterally across an organization once it compromises a single system. It can download additional malware payloads from remote servers and maintain persistence on infected Windows machines. The family has circulated for many years, and security products most often detect it in environments with weak network share hygiene and shared credentials.

Stats

First seen

January 2022

Last seen

October 2026

Alert name variants

References

• malpedia.caad.fkie.fraunhofer.de →