QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

Threat actors behind the QakBot malware have been linked to an ongoing phishing campaign since early August 2023 that led to the delivery of Ransom Knight ransomware and Remcos RAT. Despite infrastructure disruption, the threat actors continue their activity, indicating that their command-and-control servers were impacted but not their spam delivery infrastructure.