Qakbot Threat Actors Deliver Knight Ransomware & Remcos Via LNK Files

Qakbot’s infrastructure and cryptocurrency assets were seized by government authorities in an operation in August 2023 with the assistance of international allies, raising concerns about the affiliates of Qakbot. Talos researchers moderately believe Qakbot threat actors remain active, launching a recent campaign with Cyclops/Ransom Knight ransomware and the Remcos backdoor, tracked through LNK file metadata […]

The post Qakbot Threat Actors Deliver Knight Ransomware & Remcos Via LNK Files appeared first on GBHackers - Latest Cyber Security News | Hacker …

assets assistance august campaign cryptocurrency cyclops files government infrastructure international lnk lnk files qakbot ransom ransomware remcos researchers seized talos threat threat actors threats