PSA: Major Cred Stealer malware completely fucked

[Dre4d_Hunter]

You would think the retards running qakbot - with their many years of experience - would have a clue on how to keep their paying customers safe. No, you'd be wrong. If you didn't know, qakbot is a cred stealer that's been around for many years.

The FBI has just posted this: https://www.fbi.gov/news/stories/fbi-par...r-takedown

Based on this, we can make several conclusions;

1. FBI now most likely has unprecedented level of access into qakbots infrastructure. Meaning that if you are or ever have been a qakbot customer - you have also been compromised
   
2. The qakbot developers have either known about this breach and done nothing, or they have such shitty opsec that they've clulessly let the feds inside their operations for possibly years.
   
3. qakbots networks have been compromised for a serious length of time

This is completely unacceptable from a group that's been around this long. If you have ever used their cred stealer, here's what you should do;

1. If for some reason you are still using qakbot tools, STOP
   
2. Reconfigure whatever network infrastructure you're using (VPS/VPN services)
   
3. Continue to practice good opsec
   
4. Don't be a fucking retard
   

 

[Dre4d_Hunter]

This is a bump