QBot
Blog articles filed under "QBot".
• AKA Pinkslipbot
• Discovered in 2008 and under constant development, with gaps in operational use in the wild; operators are occasionally known as GOLD LAGOON
• Banking Trojan, steals financial data, browser information/hooks, keystrokes, credentials; described by CheckPoint as a “Swiss Army knife”
• Known to leverage many other tools; for example, PowerShell and Mimikatz are used for self-propagation
• Attempts obfuscation via legitimate process injection
• Known to serve as a dropper for ProLock ransomware
• Infection vectors are common, with malspam as the most frequent
