DanaBot
Banking trojan/loader
Source Attribution
- Origin
- MITRE
- Source
- Proofpoint
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Proofpoint · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered DanaBot first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
DanaBot is a modular banking trojan known for web-inject credential theft and loader duties. (attributes recorded from Proofpoint).
Definition
DanaBot is a modular banking trojan known for web-inject credential theft and loader duties.
Overview
DanaBot is a modular banking trojan known for web-inject credential theft and loader duties.
Behavior
- Multi-module
- loads TrickBot/ransomware
First Seen
2018-04
Target
Banking trojan/loader
Malware Intelligence
Family: DanaBot
Techniques: T1566, T1185
Targets: Banking trojan/loader
Behavior:
- Multi-module
- loads TrickBot/ransomware
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.