Qakbot Being Distributed in Korea Through Email Hijacking

AhnLab Security Emergency response Center (ASEC) has identified circumstances of Qakbot being distributed via malicious PDF files attached to forwarded or replies to existing emails.

Qakbot banking malware is one of those that are continuously being distributed through various media. ASEC has covered the distribution trends of Qakbot over the years.

As shown below, the distributed email has the form of a hijacked normal email where a reply is sent to the target user with a malicious file attached to …

ahnlab asec banking banking malware center distributed distribution email emails emergency files hijacked hijacking korea malicious malware malware analysis media pdf qakbot response security target trends