Hackers use Qbot malware for its advanced capabilities, including keylogging, credential theft, and backdoor functionality.
Previously distributed Qakbot malware campaign was capable of monitoring the browsing activities of the infected computer and logs all information related to finance-related websites.
Cybersecurity researchers at Checkpoint recently discovered that threat actors actively use Qbot malware via FakeUpdates, leading to the race for malware attacks.
Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month.
Four months after Operation Duck Hunt's takedown, the Qbot malware was revived in December 2023.
FakeUpdates topped the Threat Index and was found to be hitting the education sector hard.
Qbot resurfaces in a phishing attack on the hospitality sector, posing as IRS. Meanwhile, the DLL-triggered Qbot dominated for 10 months before its takedown.
FakeUpdates claims the top spot with a 2% global impact, while Nanocore holds third for six months.
Qbot was spotted in the wild in less than 4 months post-infrastructure takedown.
This shows that disrupting malware isn't enough, as threat actors always adapt.
Here below, we have mentioned all the top exploited vulnerabilities:-.
Here below we have mentioned all the top mobile malware:-.
Here below, we have mentioned all the top-attacked industries globally:-.
This Cyber News was published on gbhackers.com. Publication date: Fri, 12 Jan 2024 10:43:05 +0000