{"id":21638,"date":"2022-04-13T10:16:15","date_gmt":"2022-04-13T14:16:15","guid":{"rendered":"https:\/\/www.technewsday.com\/?p=21638"},"modified":"2022-04-14T15:01:24","modified_gmt":"2022-04-14T19:01:24","slug":"qbot-spread-malware-with-malicious-msi-windows-installer-package","status":"publish","type":"post","link":"https:\/\/technewsday.com\/staging\/qbot-spread-malware-with-malicious-msi-windows-installer-package\/","title":{"rendered":"Qbot Spread Malware With Malicious MSI Windows Installer Package"},"content":{"rendered":"<p id=\"arIndex_0\" data-ar-index=\"0\">Qbot has introduced a new strategy for spreading malware payloads.<\/p>\n<p id=\"arIndex_1\" data-ar-index=\"1\">The trojan is now spreading malware through phishing emails with password-protected ZIP archive attachments that contain malicious MSI Windows installer packages.<\/p>\n<p id=\"arIndex_2\" data-ar-index=\"2\">The trojan&#8217;s previous tactic so far has been to spread malware through phishing emails containing Microsoft Office documents laced with malicious macros.<\/p>\n<p id=\"arIndex_3\" data-ar-index=\"3\">Researchers believe the new method of spreading malware is due to Microsoft&#8217;s new plans that help block the delivery of malware via VBA Office macros. The feature was introduced after Microsoft disabled Excel 4.0 (XLM) macros by default in January.<\/p>\n<p id=\"arIndex_4\" data-ar-index=\"4\">Since attackers can use malicious VBA macros embedded in Office documents to spread malware, the feature introduced by Microsoft helps to protect Office customers.<\/p>\n<p id=\"arIndex_5\" data-ar-index=\"5\">Qbot, a Windows banking trojan is used to steal bank details, personal information and financial data. It is also used to drop backdoors on compromised computers while also deploying Cobalt Strike beacons.<\/p>\n<p id=\"arIndex_6\" data-ar-index=\"6\">The sources for this piece include an article in <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/qbot-malware-switches-to-new-windows-installer-infection-vector\/\" target=\"_blank\" rel=\"noopener\">BleepingComputer<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Qbot has introduced a new strategy for spreading malware payloads. The trojan is now spreading malware through phishing emails with password-protected ZIP archive attachments that contain malicious MSI Windows installer packages. The trojan&#8217;s previous tactic so far has been to spread malware through phishing emails containing Microsoft Office documents laced with malicious macros. Researchers believe [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[34,16],"tags":[389,388,393],"class_list":["post-21638","post","type-post","status-publish","format-standard","hentry","category-artificial-intelligence","category-security","tag-cyber-security-today","tag-privacy-security","tag-security-strategies"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/21638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=21638"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/21638\/revisions"}],"predecessor-version":[{"id":21640,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/21638\/revisions\/21640"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=21638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=21638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=21638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}