Researchers Decrypted Qakbot Banking Trojan's Encrypted Registry Keys


Researchers in cybersecurity have deciphered the mechanism used by the versatile Qakbot banking trojan to insert encrypted configuration data into the Windows Registry.

Recently, phishing campaigns have culminated in the distribution of a new loader called SQUIRRELWAFFLE, which serves as a channel for retrieving finalstage payloads like Cobalt Strike and QBot.

Read More…