Axon Rapid Response - Identification and Disruption of QakBot Infrastructure
Incident Report for Rapid Response Status Page
Resolved
Following alert AA23-242A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of QakBot infrastructure.
CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-242a

As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 90 days.
An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page.

As always, feel free to reach out for any assistance and further questions.
Team Axon.
Posted Aug 31, 2023 - 14:14 UTC
This incident affected: Rapid Response.
← Current Status Powered by Atlassian Statuspage