Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan


The Microsoft 365 Defender Threat Intelligence Team dubbed Qakbot a “customizable chameleon that adapts to suit the needs of the multiple threat actor groups that use it,” which will aid in proactively detecting and blocking the threat.

the modular malware — like TrickBot — has evolved from its early roots as a banking trojan to become a Swiss Army knife capable of data exfiltration and acting as a delivery mechanism for second stage payloads such as ransomware.

Read More…