MALWARE-FILE-TRANSFER Trojan.Win32.Qakbot -3

Rule ID

1232643

Severity

High

Description

QakBot is a modular banking trojan that has been used primarily by financially-motivated actors since at least 2007. QakBot is continuously maintained and developed and has evolved from an information stealer into a delivery agent for ransomware.

Impact

Information disclosure

Recommendation

Update vendor's patch.

IPS Category

Malware traffic

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

N/A