We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Behavior:Win32/Qakbot.A!nri
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases
Summary
Microsoft Defender Antivirus detects and removes this threat.
This threat, also known as QBot, is an malicious information stealer software. It can intercept and steal sensitive financial data. This threat has also been associated with human-operated ransomware attacks.
Microsoft Defender Antivirus raises an alert if it detects this threat on your device, and automatically removes threats as they are detected. It will quarantine the malware even if the process is running. If this threat is detected on your environment, we recommend that you immediately investigate it.