qakbot – Computer Security Articles

The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet’s online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Security Sophos

Qakbot mechanizes distribution of malicious OneNote notebooks

February 6, 2023 admin .one, applicationreject, complaintcopy, Featured, malware, onenote, qakbot, security operations, threat research

Credit to Author: Andrew Brandt| Date: Mon, 06 Feb 2023 18:17:20 +0000

A large-scale “QakNote” attack deploys malicious .one files as a novel infection vector

MalwareBytes Security

Emotet fixes bug in code, resumes spam campaign

April 27, 2022 admin email spam campaign, emotet, IcedID, malware, mark of the web, Mimikatz, motw, qakbot, Qbot, trickbot

Credit to Author: Jovi Umawing| Date: Wed, 27 Apr 2022 10:15:34 +0000

Emotet is back with a new spam campaign. And it’s now spreading itself as a shortcut link file pretending to be Word document.

The post Emotet fixes bug in code, resumes spam campaign appeared first on Malwarebytes Labs.

Security Sophos

Qakbot injects itself into the middle of your conversations

March 10, 2022 admin Featured, qakbot, Qbot, SophosLabs Uncut, threat research, webinjects

Credit to Author: Steeve Gaudreault| Date: Thu, 10 Mar 2022 11:00:56 +0000

The heavily distributed botnet delivers a wide variety of payloads – and scans your network for weaknesses

MalwareBytes Security

Spelevo exploit kit debuts new social engineering trick

December 18, 2019 admin EK, exploit kit, Gozi, malvertising, qakbot, Qbot, Social engineering, Spelevo, Threat analysis, Ursnif

Credit to Author: Jérôme Segura| Date: Wed, 18 Dec 2019 16:00:00 +0000

In order to maximize infection rate, threat actors are now launching the Spelevo exploit kit with a decoy adult site, social engineering users into downloading a malicious video player.

Categories:

Threat analysis

Tags: EK exploit kit Gozi malvertising Qakbot Qbot Social Engineering Spelevo Ursnif