QAKBOT Campaigns Leveraging Phishing Emails

QAKBOT campaigns sending phishing emails with malicious OneNote attachments have been detected targeting UCSC emails.

QAKBOT is a common trojan malware designed to steal passwords.

What's happening

Phishing emails are sent from different senders to multiple companies and organizations and multiple recipients.

Here are some of the attachment names to beware of:

  • note.one
  • Document.onecancellation.one
  • Funds_217087.one
  • Funds_594726.one

What do to do if you receive a suspicious message

If you suspect you have received a phishing email, you can send it to phishing@ucsc.edu and report it as phishing to Google.