Found and analysed by Group-IB Seen since late March Threat type – Malicious download – Loki PWS ‘Sender’ – SKM Korea Key words: RE: 2nd Payment // SKM Co.,Ltd, SKM Korea, rough time in Korea, My boss approved we make payment, Kate Lee, Overseas Business Operation