Blog

Four months after the QakBot botnet was disrupted, the QakBot malware is once again being distributed via a phishing campaign. In August, the FBI, along with law enforcement agencies from six other counties, took down the QakBot infrastructure and pushed out a Windows DLL module to infected machines, which disabled the malware. The new QakBot campaign appear to have begun in late November. Ref https://www.justice.gov/usao-cdca/pr/qakbot-malware-disrupted-international-cyber-takedown