QakBot

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[QakBot](https://attack.mitre.org/software/S0650) is a modular banking trojan that has been used primarily by financially-motivated actors since at least 2007. [QakBot](https://attack.mitre.org/software/S0650) is continuously maintained and developed and has evolved from an information stealer into a delivery agent for ransomware, most notably [ProLock](https://attack.mitre.org/software/S0654) and [Egregor](https://attack.mitre.org/software/S0554).(Citation: Trend Micro Qakbot December 2020)(Citation: Red Canary Qbot)(Citation: Kaspersky QakBot September 2021)(Citation: ATT QakBot April 2021)

Associated Techniques (71)
ID ATT&CK Tactics
T1005 Data from Local System -
T1010 Application Window Discovery -
T1016 System Network Configuration Discovery -
T1016.001 Internet Connection Discovery -
T1018 Remote System Discovery -
T1027 Obfuscated Files or Information -
T1027.001 Binary Padding -
T1027.002 Software Packing -
T1027.005 Indicator Removal from Tools -
T1027.006 HTML Smuggling -
T1027.010 Command Obfuscation -
T1027.011 Fileless Storage -
T1033 System Owner/User Discovery -
T1036.008 Masquerade File Type -
T1041 Exfiltration Over C2 Channel -
Aliases (312)
Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot Pinkslipbot QuackBot QBot
Used by Actors (3)
Storm-1811
Unknown
TA551
Unknown
TA577
Unknown
Metadata
ID: 646
Created: 13/01/2026 17:48
Updated: 06/03/2026 04:00