Tracking Qbot
ID: b1eed619-01aa-54ef-b82f-c731abd23ab4
STIX ID: report--b1eed619-01aa-54ef-b82f-c731abd23ab4
Feed Name: The Spamhaus Project
Threat Score
The report details a Qbot malspam campaign that infected legitimate Apache/PHP websites with a catch‑all .htaccess rewrite and a malicious PHP proxy which serves ZIP droppers and second‑stage malware from tiered servers, enabling countless obfuscated URLs and complicating mitigation; the code also set logging timezone to Europe/Moscow, a possible operational indicator.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.