cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
tonyb99
Level 13
Report Inappropriate Content
Message 1 of 5

Is there a new zero day Qbot malware?.... any info?

I'm getting informed by various people there is a new zero day Qbot trojan thats gone past Mcafee and Trend at minimum, anyone else heard anything or have any info?

I'm getting this 4th hand but people are suggesting at least one big company has been hit by this in the UK, I have no other info I can provide.

is this real or is it fudge?

4 Replies

Re: Is there a new zero day Qbot malware?.... any info?

We are seeing new variants of the following:

W32/IRCbot.gen.a   http://vil.nai.com/vil/content/v_137251.htm

W32/Pinkslipbot!dll  (VIL not updated yet for this one but DAT files are)    http://vil.nai.com/vil/content/v_141236.htm

Re: Is there a new zero day Qbot malware?.... any info?

One of our partners was hit on Wednesday with this. We got deployed an extra.dat (M2;W32.IRCbot;W32.Pinkslipbot!dll) from McAfee that night.

tonyb99
Level 13
Report Inappropriate Content
Message 4 of 5

Re: Is there a new zero day Qbot malware?.... any info?

Great thanks for the info, I was wondering whether any update had gone to DATS or not

Re: Is there a new zero day Qbot malware?.... any info?

DAT 5793 has the definitions for the threats. We are seeing variants come through often. So, make sure your getting the DAT updated ASAP daily.

Ron