QakBot Malware Resurfaces with New Tactics, Targeting the Hospitality Industry

Microsoft has detected a resurgence of QakBot malware phishing attacks, despite the botnet’s infrastructure having been dismantled by law enforcement. This wave of phishing messages, aimed at the hospitality sector, involved targets receiving a PDF purporting to be from an IRS employee prompting the download of the malware. QakBot, which has been distributed through spam emails, can harvest sensitive information and deliver a range of other malware, including ransomware.