Qakbot malware’s creators ride again, despite FBI takedown

The creators and operators of the Qakbot banking Trojan are believed to be working on a new cyberattack campaign. Although Qakbot was dismantled in August, researchers from Cisco’s Talos threat intelligence group say the team may now be distributing a variant of the Knight ransomware using phishing methods. Their methodology also suggests the team may not be behind the ransomware, but are instead likely customers.