logo

PikaBot malware on the rise: What organizations need to know 

ID: 339db855-77c5-54a8-b176-7a4b67345d85

STIX ID: report--339db855-77c5-54a8-b176-7a4b67345d85

Feed Name: Malwarebytes Blog

Threat Score
72/100

Date Published: 2024-03-01

Date Updated: 2026-04-28

...
...

This ThreatDown report describes PikaBot, a modular trojan emerging in early 2023 that acts as a QakBot successor and is being leveraged by ransomware affiliates (notably BlackBasta); it details PikaBot's capabilities (command execution, payload delivery, process injection, credential theft), distribution vectors (geolocated email phishing, malvertising, SMB-hosted ZIPs), evasive techniques, and recommended defenses including EDR, phishing controls, and proactive threat hunting.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.