We saw new #Qbot #Qakbot 'tchk07' from PDF > URLs today. MSI > AdobeAC.dll w/ export EditOwnerInfo.
This is still very low volume and targeted.
Huge shout out to our fantastic Myrtus for the RE and config extraction. IOCs in original thread.
Samples:
bazaar.abuse.ch/browse/tag/tch…