Organizations in the hospitality industry have been targeted by a new phishing campaign distributing the QakBot, or QBot, malware months after the botnet was taken down in a law enforcement operation, according to BleepingComputer. Attackers behind the campaign delivered emails spoofing an IRS employee that included a PDF attachment purporting to be a guest list, which when downloaded would prompt an MSI and later deploy the QakBot malware DLL, said the Microsoft Threat Intelligence team on X, formerly Twitter.

Source: SC Magazine