Qbot malware returns after this summer’s law enforcement disruption

QakBot malware is once again being distributed through phishing campaigns, having been disrupted by law enforcement over the summer. In a recent attack, it is being distributed in an email masquerading as an IRS employee. Microsoft has warned that the campaign is primarily targeting the hospitality industry, and researchers have noted minor changes in the new QakBot version. Originally a banking trojan, QakBot now provides initial access for ransomware attacks and data theft.