Mallard Spider

Russian Federation


Since mid-2009, MALLARD SPIDER has been the criminal developer and operator of QakBot, a sophisticated banking trojan primarily used as a downloader. The malware was under active development and distributed via high-tempo malspam campaigns until August 2023, when a multinational law enforcement operation led by the Federal Bureau of Investigation (FBI) seized QakBot C2 servers, removed the malware...

Community Identifiers



  • h0VTA2ay9xYlkWS


  • SfM9CcZE

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.