QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

The QakBot malware creators have launched a phishing campaign, despite disruptions to their infrastructure. Their activity has been linked to the distribution of Ransom Knight and Remcos RAT malware. Although their command-and-control servers were targeted, their spam delivery infrastructure remains unaffected. Cybersecurity firm Cisco Talos advises that QakBot will likely continue to pose significant threats.