EP07: A Discussion and Analysis of Qakbot

In today’s episode, Andy and Umut Alemdar explore one of the most malicious botnets in today’s digital threat landscape: Qakbot. What makes Qakbot so dangerous? 

Qakbot originally started out as an information stealer back in 2007. Over the years, it has undergone significant transformations, evolving into a multi-modular malware that poses a severe threat to businesses. In our discussion and analysis, we uncover its attack chain from infecting a system to downloading malicious payload. 

Timestamps:

3:24 – What is Qakbot? 

5:18 – An overview of Qakbot’s attack chain and capabilities 

14:38 – Mitigation and defence strategies for Qakbot  

19:48 – What does the future look like for Qakbot? 

Episode Resources:

The Reemergence of Emotet and Why Botnets Continue to Return

Security Awareness Service

Advanced Threat Protection

Find Andy on LinkedIn, X or Mastadon

Find Umut on LinkedIn