S0650 - Qakbot

QakBot is a modular banking trojan that has been used primarily by financially-motivated actors since at least 2007. QakBot is continuously maintained and developed and has evolved from an information stealer into a delivery agent for ransomware, most notably ProLock and Egregor

Author
agomez
Created
2023-03-27 16:01:33
Last updated
2026-02-07 18:38:43
Downloads
902432
IPv4 indicators
301
Hostname indicators
5025
URL indicators
189
Sample indicators
151

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

https://glutec.net/colitis.php URL

modified 2026-10-17 10:38:39
QakBot (ThreatFox Abuse.ch)

https://whp.pt/um/qumbutediasamu URL

modified 2026-10-17 10:37:59
Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

solista.in Hostname

modified 2026-10-17 10:22:07
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

83.7.52.249 IPv4

modified 2026-10-17 08:43:07
ET CNC Feodo Tracker Reported CnC Server UDP (Emerging Threats) · ET CNC Feodo Tracker Reported CnC Server TCP (Emerging Threats) · QakBot (FeodoTracker Abuse.ch) · QakBot (ThreatFox Abuse.ch) · Mail Spammer (Barracuda)

gobrsolutions.com Hostname

modified 2026-10-17 08:41:48
QakBot (ThreatFox Abuse.ch)

anglonubian.ro Hostname

modified 2026-10-17 08:41:48
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

waheedkhan.ca Hostname

modified 2026-10-17 08:41:45
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

dropenviro.com Hostname

modified 2026-10-17 08:41:45
Top Popularity Site (Cisco Umbrella) · QakBot (ThreatFox Abuse.ch)

virant.si Hostname

modified 2026-10-17 08:41:45
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

json2go.com Hostname

modified 2026-10-17 08:41:44
Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

greksasesoressac.com Hostname

modified 2026-10-17 08:41:44
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

cprindia.in Hostname

modified 2026-10-17 08:41:44
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

petrohawkcentrum.com Hostname

modified 2026-10-17 08:41:44
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

pvaemail.com Hostname

modified 2026-10-17 08:41:44
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

atriaingenieria.com Hostname

modified 2026-10-17 08:41:44
QakBot (ThreatFox Abuse.ch)

vctradingmethod.com Hostname

modified 2026-10-17 08:41:43
QakBot (ThreatFox Abuse.ch)

herbsgallery.com Hostname

modified 2026-10-17 08:41:43
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

vainavitechnologies.com Hostname

modified 2026-10-17 08:41:42
(URLhaus Abuse.ch) · 2023-05-30 12:09:34 (URLhaus Abuse.ch) · Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

e-total.ro Hostname

modified 2026-10-17 08:41:42
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

saf27data.com.ng Hostname

modified 2026-10-17 08:41:39
QakBot (ThreatFox Abuse.ch)

planmyholidayz.com Hostname

modified 2026-10-17 08:41:38
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

volainc.co Hostname

modified 2026-10-17 08:41:37
QakBot (ThreatFox Abuse.ch)

asc-avocats.fr Hostname

modified 2026-10-17 08:41:37
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

eeshanindustries.in Hostname

modified 2026-10-17 08:41:37
QakBot (ThreatFox Abuse.ch)

soloparaganadores.com Hostname

modified 2026-10-17 08:41:37
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

keysolutionsandservices.com Hostname

modified 2026-10-17 08:41:32
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

wayseg.com.ar Hostname

modified 2026-10-17 08:41:31
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

terrashorizonte.com.br Hostname

modified 2026-10-17 08:41:31
QakBot (ThreatFox Abuse.ch)

wavang.org Hostname

modified 2026-10-17 08:41:30
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

dialogoscriticos.com Hostname

modified 2026-10-17 08:41:30
QakBot (ThreatFox Abuse.ch)

trucrisp.co.za Hostname

modified 2026-10-17 08:41:29
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

noagroup.ro Hostname

modified 2026-10-17 08:41:29
QakBot (ThreatFox Abuse.ch)

mecanicallaima.cl Hostname

modified 2026-10-17 08:41:28
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

grupofacilitti.com.br Hostname

modified 2026-10-17 08:41:28
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

dhakapdm.com Hostname

modified 2026-10-17 08:41:28
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

npengine.com Hostname

modified 2026-10-17 08:41:28
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

ggomes.adv.br Hostname

modified 2026-10-17 08:41:28
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

lunadequeso.com.mx Hostname

modified 2026-10-17 08:41:27
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

arcollectionusa.com Hostname

modified 2026-10-17 08:41:26
QakBot (ThreatFox Abuse.ch)

abys.net.id Hostname

modified 2026-10-17 08:41:26
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

codixgambia.com Hostname

modified 2026-10-17 08:41:26
QakBot (ThreatFox Abuse.ch)

gaveafomento.com.br Hostname

modified 2026-10-17 08:41:25
QakBot (ThreatFox Abuse.ch)

colegioauroradechilesur.cl Hostname

modified 2026-10-17 08:41:24
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

strengthen.co.in Hostname

modified 2026-10-17 08:41:24
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

level1group.net Hostname

modified 2026-10-17 08:41:22
QakBot (ThreatFox Abuse.ch)

silversandbeachcottages.com Hostname

modified 2026-10-17 08:41:22
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

forefrontcanada.com Hostname

modified 2026-10-17 08:41:22
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

startrekultimatevoyagestore.com Hostname

modified 2026-10-17 08:41:22
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

ethanetechnologies.org Hostname

modified 2026-10-17 08:41:22
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

webarc.it Hostname

modified 2026-10-17 08:41:21
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

maentertainment.co.uk Hostname

modified 2026-10-17 08:41:20
QakBot (ThreatFox Abuse.ch)

fauzmechanics.com Hostname

modified 2026-10-17 08:41:19
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

semcobina.com.my Hostname

modified 2026-10-17 08:41:17
QakBot (ThreatFox Abuse.ch)

cipta.net.id Hostname

modified 2026-10-17 08:41:15
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

camaranazarezinho.pb.gov.br Hostname

modified 2026-10-17 08:41:13
QakBot (ThreatFox Abuse.ch)

quorumcontabil.com.br Hostname

modified 2026-10-17 08:41:12
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

wetechapp.com Hostname

modified 2026-10-17 08:41:11
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

voceinncaldas.com Hostname

modified 2026-10-17 08:41:10
QakBot (ThreatFox Abuse.ch)

hotelbillabong.com.np Hostname

modified 2026-10-17 08:41:09
QakBot (ThreatFox Abuse.ch)

impactosdespachante.com.br Hostname

modified 2026-10-17 08:41:09
QakBot (ThreatFox Abuse.ch)

ozzyconstructionusa.com Hostname

modified 2026-10-17 08:41:08
QakBot (ThreatFox Abuse.ch)

hmsdok.no Hostname

modified 2026-10-17 08:41:08
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

matkaapi.com Hostname

modified 2026-10-17 08:41:08
Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

jpvanillaspices.com Hostname

modified 2026-10-17 08:41:08
QakBot (ThreatFox Abuse.ch)

wesanxaneyaazad.net Hostname

modified 2026-10-17 08:41:08
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

avscourierservice.com Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch)

easypaketshop.ch Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

waterpumprepairdubai.com Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch)

bt-ps.com Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch)

star-stream.com Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch)

daktos.org Hostname

modified 2026-10-17 08:41:07
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

gorillaguttergang.com Hostname

modified 2026-10-17 08:41:06
QakBot (ThreatFox Abuse.ch)

dg-companies.com Hostname

modified 2026-10-17 08:41:06
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

lainefraser.com Hostname

modified 2026-10-17 08:41:05
QakBot (ThreatFox Abuse.ch)

kanzproperties.com Hostname

modified 2026-10-17 08:41:05
QakBot (ThreatFox Abuse.ch)

ratechnosys.co.uk Hostname

modified 2026-10-17 08:41:03
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

humpuss.co.id Hostname

modified 2026-10-17 08:41:00
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

itsazzad.com Hostname

modified 2026-10-17 08:40:59
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

zwangsraeumung-verhindern.de Hostname

modified 2026-10-17 08:40:59
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

cubohub.com.br Hostname

modified 2026-10-17 08:40:58
QakBot (ThreatFox Abuse.ch)

wiccikenya.com Hostname

modified 2026-10-17 08:40:57
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

coastalpropertypreservation.com Hostname

modified 2026-10-17 08:40:57
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

safarwebas.com Hostname

modified 2026-10-17 08:40:57
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

gooseislandchina.com Hostname

modified 2026-10-17 08:40:57
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

waterside.tv Hostname

modified 2026-10-17 08:40:57
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

megaa-store.com Hostname

modified 2026-10-17 08:40:56
Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

ducatimonterrey.com.mx Hostname

modified 2026-10-17 08:40:56
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

burolaboral.mx Hostname

modified 2026-10-17 08:40:56
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

srikalaivanipackersandmovers.com Hostname

modified 2026-10-17 08:40:54
QakBot (ThreatFox Abuse.ch)

techoices.com Hostname

modified 2026-10-17 08:40:52
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

casacerveza.co.za Hostname

modified 2026-10-17 08:40:52
QakBot (ThreatFox Abuse.ch)

tlrtelecoms.com Hostname

modified 2026-10-17 08:40:51
QakBot (ThreatFox Abuse.ch)

websolucionesdigitales.com Hostname

modified 2026-10-17 08:40:51
QakBot (ThreatFox Abuse.ch)

joaoandrade.com.br Hostname

modified 2026-10-17 08:40:50
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

sprintbolivia.com Hostname

modified 2026-10-17 08:40:49
Malware Download (URLhaus Abuse.ch) · QakBot (ThreatFox Abuse.ch)

visharafurniture.lk Hostname

modified 2026-10-17 08:40:49
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

robonautsindia.in Hostname

modified 2026-10-17 08:40:49
QakBot (ThreatFox Abuse.ch)

erengenharia.net.br Hostname

modified 2026-10-17 08:40:47
QakBot (ThreatFox Abuse.ch)

imobiliariarenascer.com.br Hostname

modified 2026-10-17 08:40:46
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

datacareltd.net Hostname

modified 2026-10-17 08:40:46
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)