Skip to content

Malware

Loda

aka LodaRAT · Nymeria

Loda is a previously undocumented AutoIT malware with a variety of capabilities for spying on victims.

Loda, also known as LodaRAT, Nymeria, is a Windows malware family.

Background

Loda is a formerly undocumented AutoIT-based malware offering numerous features for surveilling its targets. Proofpoint first spotted it in September 2016, after which its use spread. The name comes from a directory the author selected for storing keylogger output. Notably, several antivirus engines flag it as "Trojan.Nymeria," though that association is not well established.


Source: Malpedia (Fraunhofer FKIE).