Kevin Beaumont on Nostr: Qakbot = ransomware entry. Everybody calls it banking trojan, but it really wasn't ...
Qakbot = ransomware entry. Everybody calls it banking trojan, but it really wasn't for a loooong time.
It was live on 700k endpoints (!) which should give you an idea of the scale of cybersecurity woes at many orgs (it's still really, really bad out there).
Published at
2023-08-29 19:53:46Event JSON
{
"id": "62bd210bf83b2c011a00db7587fb3aabc6e9557522bc63b2f71ef40bb6dff320",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1693338826,
"kind": 1,
"tags": [
[
"e",
"c2bbe0f17ca341f64fbad8a2b185dc00a09b533225ac07b0aeb4d677fb9de6cd",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/110974653319805232",
"activitypub"
]
],
"content": "Qakbot = ransomware entry. Everybody calls it banking trojan, but it really wasn't for a loooong time. \n\nIt was live on 700k endpoints (!) which should give you an idea of the scale of cybersecurity woes at many orgs (it's still really, really bad out there).",
"sig": "aef581d0ebb6a6c7ce175f86a1da285ec9224c2f46d7e389f166ee1b070cb00c17a7c2402363c9cdeb599667c1480b214c5c53e2d7580d7b46920145780c08a8"
}
