Researchers say Black Basta is dropping QBot malware – also called QakBot – in a widespread ransomware campaign targeting mostly U.S.-based companies.
In the group’s latest campaign, attackers are again using QBot to install a backdoor and then drop in encryption malware and other malicious code, according to Cybereason.