QBot Banking Trojan Spreading via Business Emails
Channel: Wiredhippie
Date: 2023-04-17

Kaspersky has discovered a QBot malware campaign that has been targeting users in multiple countries since April 4, 2023. QBot is a banking trojan that has been active since 2007 and is distributed through phishing campaigns, malicious links, and malicious attachments. The recent campaign involves hijacking business correspondence to trick victims into opening malicious PDF files which contain an obfuscated Windows Script File (.WSF) that downloads a malicious DLL, the QBot malware. Another recent campaign was discovered by Elastic Security Labs, which uses weaponized Microsoft Word documents to distribute Agent Tesla and XWorm.

#shorts #techshorts #technews #tech #technology #malware #unsuspecting victims #malicious links