Trusted Design

The Return of Qbot

概要

Qbot, also known as Qakbot, is a network-aware worm with backdoor capabilities, primarily designed as a credential harvester. It is an old threat and was well-described by Symantec back in 2009.1 The company later released a whitepaper which described Qbot version 910 in great detail. BAE Systems’ Incident Response team were called in to investigate the ongoing infection and support in containing and remediating the threat. A number of Qbot samples were found within the victim organisation’s network; all samples polymorphic variations of the same Qbot family.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• The return of Qbot (score: 0.92)
• ISC 2015-12-30: Actor using Rig EK to deliver Qbot - update (score: 0.67)
• Qakbot - A capable banking trojan (score: 0.67)
• Threat Spotlight: The Return of Qakbot Malware (score: 0.61)
• MTA 2016-01-11: RIG EK FROM 46.30.43.79 SENDS QBOT (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る