Tag

#qakbot

1 post tagged #qakbot.

Analysis · May 20, 2026 · Colten Anderson

The FBI dismantled QakBot in 2023. In 2024 it was test-driving a Windows zero-day.

CVE-2024-30051 is a DWM Core Library privilege escalation to SYSTEM, used as a zero-day. Kaspersky tied it to QakBot, the botnet taken down nine months earlier, and found the exploit was already in several groups' hands before the patch.