https://www.cisecurity.org/insights/blog/surge-of-qakbot-activity-using-malspam-malicious-xlsb-files
Surge of QakBot Activity Using Malspam, Malicious XLSB Files
The MS-ISAC is observing an uptick in SLTT QakBot activity aligned with open-source reporting. Let's examine one of those campaigns.
surgeqakbotactivityusingmalspam
https://drive.google.com/file/d/1VfFeD5XpPT1BmUaHq_WNcVN074uJLy78/view?usp=sharing
MODEL SCHOOL PRC 2020 PAY FIXATION.xlsb - Google Drive
model schoolpay fixationprc2020xlsb