A phishing campaign using DarkGate and PikaBot malware is employing tactics similar to the previously taken-down QakBot operation. The operators behind the campaign have adopted hijacked email threads, unique URL patterns, and an infection chain that closely resembles what was used by QakBot affiliates. Additionally, the DarkGate campaign has intensified since the takedown of QakBot, posing a high-level threat with the potential for more sophisticated threats like reconnaissance malware and ransomware.
Sort: