H-ISAC TLP White: Threat Joint Cybersecurity Advisory: Identification and Disruption of QakBot Infrastructure

On August 25, the FBI, in coordination with international partners, executed a coordinated operation to disrupt QakBot infrastructure worldwide. Disruption operations targeting QakBot infrastructure resulted in the botnet takeover, which severed the connection between victim computers and QakBot command and control (C2) servers. The FBI is working closely with industry partners to share information about the malware to maximize detection, remediation, and prevention measures for network defenders.