"Pikabot Returns With New Tricks up Its Sleeve"

Pikabot has returned with updates to its capabilities and components, as well as a new delivery campaign. It is a loader, primarily acting as a delivery mechanism for other malware. It first appeared in early 2023 and has since been widely used by threat actors to deliver payloads. Following the disruption of the Qakbot botnet, Pikabot surfaced as an alternative, becoming especially active in the second half of 2023. It was initially distributed through malspam and malvertising campaigns that promoted seemingly legitimate software like AnyDesk, Slack, and Zoom. Its activity ceased in December 2023, possibly because of the release of a new version of Qakbot. Researchers at Elastic Security Labs found a new Pikabot campaign involving the use of phishing emails for initial access. This article continues to discuss findings regarding the return of Pikabot.

Help Net Security reports "Pikabot Returns With New Tricks up Its Sleeve"

Submitted by grigby1