Botnet: Nach Qakbot-Takedown verteilen Drahtzieher weiter Malware

Cybercriminals who were behind the Qakbot botnet, dismantled by international law enforcement in August, are still active and distributing ransomware, according to IT security researchers from Cisco-Talos. They started a campaign in early August distributing Ransom Knight (Cyclops) ransomware and the Remcos backdoor via phishing emails. Researchers believe they could rebuild the Qakbot infrastructure as the developers have not been arrested.