Date Author Title
2023-02-28Brad DuncanBB17 distribution Qakbot (Qbot) activity
2022-12-02Brad Duncanobama224 distribution Qakbot tries .vhd (virtual hard disk) images
2022-10-16Didier StevensVideo: Analysis of a Malicious HTML File (QBot)
2022-10-13Didier StevensAnalysis of a Malicious HTML File (QBot)
2022-06-09Brad DuncanTA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt)
2022-04-20Brad Duncan"aa" distribution Qakbot (Qbot) infection with DarkVNC traffic
2022-03-16Brad DuncanQakbot infection with Cobalt Strike and VNC activity
2021-03-03Brad DuncanQakbot infection with Cobalt Strike
2021-01-26Brad DuncanTA551 (Shathak) Word docs push Qakbot (Qbot)
2021-01-20Brad DuncanQakbot activity resumes after holiday break
2020-12-09Brad DuncanRecent Qakbot (Qbot) activity
2020-04-01Brad DuncanQakbot malspam sent from an infected Windows host