Multinational Operation Disrupts QakBot Botnet

The report describes a U.S.-led multinational disruption of the QakBot banking trojan/botnet (linked to over 700,000 infections) in which law enforcement redirected botnet traffic, deployed an uninstaller to infected hosts, seized cryptocurrency proceeds, and provided victim resources and hardening recommendations; QakBot’s role as an initial access vector for numerous ransomware groups and its significant historical impact make this a high-priority malicious infrastructure takedown with uncertain long-term impact.