How the FBI and European partners seized notorious ‘Qakbot’ cybercrime hacking network
The FBI and its European partners have removed a malicious software agent from thousands of infected computers after seizing control of a global malware network, US officials have said.
The agent – known as Qakbot – was used as part of online crimes, including ransomware attacks, for more than 15 years.
The criminal network made around $58m (£45.8m) from victims, between October 2021 and April 2023, officials said.
Victims included an Illinois-based engineering firm, financial services organisations in Alabama and Kansas, along with a Maryland defence manufacturer and a southern California food distribution company, Martin Estrada, the US attorney in Los Angeles said.
“Nearly every sector of the economy has been victimised by Qakbot,” Mr Estrada said.
US Attorney Martin Estrada said Qakbot malware had infected more than 700,000 victim computers. Pic: AP
In an operation dubbed “Duck Hunt”, the FBI along with Europol and law enforcement and justice partners in France, the UK, Germany, the Netherlands, Romania and Latvia, seized more than 50 Qakbot servers and identified more than 700,000 infected computers, more than 200,000 of which were in the US.
By doing this, criminals were effectively cut off from their source.
The FBI then used the seized Qakbot infrastructure to remotely dispatch updates that deleted the malware from thousands of infected computers.
Read more:
Electoral Commission targeted by cyber attack
University of Manchester says its data ‘likely copied’
Growth of ‘hackers for hire’
Researchers said they believed the cybercriminals to be in Russia or other former Soviet states, but Mr Estrada did not say where individuals were located.
What is Qakbot?
First appearing in 2008, Qakbot gives criminal hackers initial access to violated computers.
Usually delivered via phishing email infections, criminals could then install additional ransomware, steal sensitive information or gather intelligence on victims to facilitate financial fraud and crimes such as tech support and romance scams.
FBI assistant director in charge, Don Alway. Pic: AP
Once infected, the computers become part of a botnet – a network of computers infected by malware and under the control of a single attacking party.
Qakbot impacted one in 10 corporate networks and accounted for about 30% of global attacks, a pair of cybersecurity firms found.
The operation was the biggest success for the FBI against cybercriminals, but experts warned that any setback to cybercrime would likely be temporary.
Chester Wisniewski, a cybersecurity expert at Sophos – a British-based security software and hardware company – said that while there could be a temporary drop in ransomware attacks, the criminals can be expected to either revive infrastructure elsewhere or move to other botnets.
“This will cause a lot of disruption to some gangs in the short term, but it will do nothing [to stop it] from being rebooted,” he said.
“Albeit it takes a long time to recruit 700,000 PCs.”
US president-elect Donald Trump has suggested Israel and Hamas could agree a Gaza ceasefire by the end of the week.
Talks between Israeli and Hamas representatives resumed in the Qatari capital Doha yesterday, after US President Joe Biden indicated a deal to stop the fighting was “on the brink” on Monday.
A draft agreement has been sent to both sides. It includes provisions for the release of hostages and a phased Israeli troop withdrawal from Gaza.
Qatar says Israel and Hamas are at their “closest point” yet to a ceasefire deal.
Two Hamas officials said the group has accepted the draft agreement, with Israel still considering the deal.
An Israeli official said a deal is close but “we are not there” yet.
More than 46,500 Palestinians have been killed in Gaza since Israel launched its ground offensive in the aftermath of the 7 October attacks, according to the territory’s Hamas-run health ministry.
Read more:
What’s in the proposed deal?
Palestinians inspect the site of an Israeli strike on beachfront cafe in Deir al Balah. Pic: Reuters
Biden hails possibility of agreement
President Biden said it would include a hostage release deal and a “surge” of aid to Palestinians, in his final foreign policy speech as president.
“So many innocent people have been killed, so many communities have been destroyed. Palestinian people deserve peace,” he said.
“The deal would free the hostages, halt the fighting, provide security to Israel, and allow us to significantly surge humanitarian assistance to the Palestinians who suffered terribly in this war that Hamas started.”
Qatari mediators have sent Israel and Hamas a draft proposal for an agreement to halt the fighting.
Analysis:
Deal might be close, but there are many unanswered questions
Pic: Reuters
Trump: ‘We’re very close’
President-elect Donald Trump has also discussed a possible peace deal during a phone interview with the Newsmax channel.
“We’re very close to getting it done and they have to get it done,” he said.
“If they don’t get it done, there’s going to be a lot of trouble out there, a lot of trouble, like they have never seen before.
“And they will get it done. And I understand there’s been a handshake and they’re getting it finished and maybe by the end of the week. But it has to take place, it has to take place.”
Read more:
Pope Francis honoured by Joe Biden
Donald Trump’s inauguration 2.0
Pic: AP
Israeli official: Former Hamas leader held up deal
Speaking on Tuesday as negotiations resumed in Qatar, an anonymous Israeli official said that an agreement was “close, but we are not there”.
They accused Hamas of previously “dictating, not negotiating” but said this has changed in the last few weeks.
“Yahya Sinwar was the main obstacle for a deal,” they added.
Sinwar, believed to be the mastermind of the 7 October attacks, led Hamas following the assassination of his predecessor but was himself killed in October last year.
Under Sinwar, the Israeli official claimed, Hamas was “not in a rush” to bring a hostage deal but this has changed since his death and since the IDF “started to dismantle the Shia axis”.
Please use Chrome browser for a more accessible video player
Biden: ‘Never, never, never, ever give up’
Iran ‘weaker than it’s been in decades’
Yesterday, President Biden also hailed Washington’s support for Israel during two Iranian attacks in 2024.
“All told, Iran is weaker than it’s been in decades,” the president said.
Mr Biden claimed America’s adversaries were weaker than when he took office four years ago and that the US was “winning the worldwide competition”.
“Compared to four years ago, America is stronger, our alliances are stronger, our adversaries and competitors are
weaker,” he said.
“We have not gone to war to make these things happen.”
The US president is expected to give a farewell address on Wednesday.
A draft ceasefire deal on the table between Israel and Hamas would see 33 hostages set free and a phased withdrawal of IDF forces from parts of Gaza.
President Joe Biden said an agreement to stop the fighting was “on the brink” and high level negotiations between the two sides resumed in Qatar on Tuesday.
The deal would see a number of things happen in a first stage, with negotiations for the second stage beginning in the third week of the ceasefire.
It would also allow a surge in humanitarian aid into Gaza, which has been devastated by more than a year of war.
Details of what the draft proposal entails have been emerging on Tuesday, reported by Israeli and Palestinian officials.
Relatives and supporters of Israeli hostages hold photos of their loved ones during a protest on 8 January. Pic: AP
Hostages to be returned
In the first stage of the potential ceasefire, 33 hostages would be set free.
These include women (including female soldiers), children, men over the age of 50, wounded and sick.
Israel believes most of these hostages are alive but there has not been any official confirmation from Hamas.
In return for the release of the hostages, Israel would free more than 1,000 Palestinian prisoners and detainees.
People serving long sentences for deadly attacks would be included in this but Hamas fighters who took part in the 7 October attack would not be released.
An arrangement to prevent Palestinian “terrorists” from going back to the West Bank would be included in the deal, an anonymous Israeli official said.
Read more:
A timeline of events since the 7 October attacks
The hostages who still haven’t returned home
Smoke billows as buildings lie in ruin in Beit Hanoun in Gaza. Pic: Reuters
Phased Israeli withdrawal from Gaza
The agreement also includes a phased withdrawal of Israeli forces from Gaza, with IDF troops remaining in the border perimeter to defend Israeli border towns and villages.
Security arrangements would be implemented at the Philadelphi corridor – a narrow strip of land that runs along the border between Egypt and Gaza – with Israel withdrawing from parts of it after the first few days of the deal.
The Rafah Crossing between Egypt and Gaza would start to work gradually to allow the crossing of people who are sick and other humanitarian cases out of Gaza for treatment.
Unarmed North Gaza residents would be allowed to return to their homes, with a mechanism introduced to ensure no weapons are moved there.
“We will not leave the Gaza Strip until all our hostages are back home,” the Israeli official said.
What will happen to Gaza in the future?
There is less detail about the future of Gaza – from how it will be governed, to any guarantees that this agreement will bring a permanent end to the war.
“The only thing that can answer for now is that we are ready for a ceasefire,” the Israeli official said.
“This is a long ceasefire and the deal that is being discussed right now is for a long one. There is a big price for releasing the hostages and we are ready to pay this price.”
The international community has said Gaza must be run by Palestinians, but there has not been a consensus about how this should be done – and the draft ceasefire agreement does not seem to address this either.
In the past, Israel has said it will not end the war leaving Hamas in power. It also previously rejected the possibility of the Palestinian Authority, which exercises limited governing powers in the West Bank, from taking over the administration of Gaza.
Since the beginning of its military campaign in Gaza, Israel has also said it would retain security control over the territory after the fighting ends.
-
Sports2 years ago‘Storybook stuff’: Inside the night Bryce Harper sent the Phillies to the World Series
-
Sports9 months agoStory injured on diving stop, exits Red Sox game
-
Sports1 year agoGame 1 of WS least-watched in recorded history
-
Sports2 years agoMLB Rank 2023: Ranking baseball’s top 100 players
-
Sports3 years ago
Team Europe easily wins 4th straight Laver Cup
-
Environment2 years agoJapan and South Korea have a lot at stake in a free and open South China Sea
-
Environment2 years agoGame-changing Lectric XPedition launched as affordable electric cargo bike
-
Business2 years agoBank of England’s extraordinary response to government policy is almost unthinkable | Ed Conway