2022-06-09 | Brad Duncan | TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt) |
2022-04-20 | Brad Duncan | "aa" distribution Qakbot (Qbot) infection with DarkVNC traffic |
2022-03-16 | Brad Duncan | Qakbot infection with Cobalt Strike and VNC activity |
2021-03-03 | Brad Duncan | Qakbot infection with Cobalt Strike |
2021-01-26 | Brad Duncan | TA551 (Shathak) Word docs push Qakbot (Qbot) |
2021-01-20 | Brad Duncan | Qakbot activity resumes after holiday break |
2020-12-09 | Brad Duncan | Recent Qakbot (Qbot) activity |
2020-04-01 | Brad Duncan | Qakbot malspam sent from an infected Windows host |