Kaspersky, a cybersecurity company, recently discovered a spike in Qbot malware targeting corporate users. The malware is being spread through a malicious spam email campaign that uses advanced social engineering techniques. The attackers intercept existing work correspondence and forward malicious PDF attachments to the same email threads, which is considered an unusual method for this type of malware.
READ ALSO:
China Aims for Global Technological Supremacy in Cyberspace, Warns Britain’s Cyber Chief
Al Moammar Information Systems wins SAR 96.36 million contract for Public Investment Fund project
Dubai’s DIFC partners with Mastercard to drive digital transformation in fintech sector
Since April 4, more than 5,000 emails containing PDF attachments have been received in various countries and the campaign is still ongoing. Kaspersky researchers conducted a technical analysis of the scheme.
Qbot is a well-known banking Trojan that operates as part of a botnet network. It is capable of stealing data such as passwords and work correspondence, as well as allowing threat actors to control an infected system and install ransomware or other Trojans on other devices in the network