QakBot Resurges Latest Strikes with Ransom Knight and Remcos RAT

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The QakBot malware has been associated with a persistent phishing campaign since the beginning of August 2023, leading to the deployment of both the Ransom Knight ransomware and the Remcos RAT.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.