Mallard Spider

Russian Federation


Since mid-2009, MALLARD SPIDER has been the criminal developer and operator of QakBot, a sophisticated banking trojan primarily used as a downloader. The malware was under active development and distributed via high-tempo malspam campaigns until August 2023, when a multinational law enforcement operation led by the Federal Bureau of Investigation (FBI) seized QakBot C2 servers, removed the malware...

Community Identifiers



  • sPokfG6j2KLmwa7


  • 16giYRh4

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.