Cybercrime, Quakbot goes through a fake Covid-19 themed email
The link in the message downloads a password protected zip file (provided in the text) with an MSI executable that installs the malware.
Cybercrime, Quakbot campaign via “HOUSE 9A s.r.o”
The email attachment contains a file that, if opened, contacts a url and downloads the dll, starting the malware infection.
Cybercrime, Quakbot campaign via real stolen email conversation
The two links in the message download a zip with an xls inside, which contacts three URLs from which the dll is downloaded, starting the malware infection.
Cybercrime, Quakbot exploits U.K. STEEL EXPORTS LIMITED company certificates
New signed campaign to trick victims’ antivirus, allowing them to download and install the malware via attachment.
Cybercrime, PARTYNET LIMITED company certificates exploited by Quakbot
New signed campaign to trick victims’ antivirus, allowing them to download and install the malware via attachment.
Cybercrime, new Quakbot campaign via stolen email conversation
The link in the text downloads a zip file with an xls inside. This contacts two URLs from which it downloads the dll and starts the malware infection.
Cybercrime, Quakbot campaign exploits a real stolen mail conversation
The zip attachment of the message, written in Italian and English, contains an xls, which contacts a url from internal list and downloads the dll, staring malware infection.
Cybercrime, PKV Trading ApS company certificates exploited by Quakbot
New signed campaign to trick victims’ antivirus, allowing them to download and install the malware via attachment.
Cybercrime, Quakbot exploits ADV TOURS d.o.o.” company certificates
New signed campaign to allow victims to download and install the malware via the attachment, tricking the antivirus.
Cybercrime, Quakbot attacks via PROTIP d.o.o. – v stečaju certificates
New signed campaign to allow victims to download and install the malware via attachment, tricking the antivirus.