• Tutorials
  • Courses
  • Tracks

After detecting QakBot in the network, which immediate step best limits its lateral movement?

Last Updated :
Discuss
Comments

After detecting QakBot in the network, which immediate step best limits its lateral movement?

Shut down all servers instantly

Isolate the infected host(s), rotate credentials, and block lateral protocols (SMB, RDP)

Send ransom demands to attacker

Disable antivirus across entire network

Share your thoughts in the comments