Follina Exploit Leads to Domain Compromise
released on 2022-10-31 @ 02:48:12 PM
A new investigation by The DFIR Report about a Qbot malware intrusion that took place in early June 2022. Qbot, also known as Qakbot or Pinksliplot is actively developed and capable of a number of functions from reconnaissance, lateral movement, data exfiltration, to delivering other payloads acting as an initial access broker. Qbot is regarded by US CERT as being one of the 2021 Top Malware Strains in Alert (AA22-216A).