Can confirm that we have seen the recent #Qbot #Quakbot #Qakbot activity. PDFs/URLs has been used since at least November 28, but can't confirm what payload it was earlier than December 11.
URL example: urlhaus.abuse.ch/url/2741437/
MSI/DLL: bazaar.abuse.ch/browse/tag/teo…