Tally-ho!
The hunt culminated in 3 graphs for us to dissect: one focusing solely on the sample sightings, and two outlining the C&C numbers.
Finding one: confirmation
This may account for the odd dip in IOCs following May, though it is also unknown how long Operation Duck Hunt was active for, and what kind of effects covert interference might have on these results.
The unsurprising but not unwelcome first find among the collected numbers: the Qakbot’s takedown is not shy about showing itself through a glaring lack of samples and Qakbot related infrastructure IOCs in the collected findings. Qakbot was observed decreasing activity and working on their internal infrastructure during the summer months.
Figures 26 and 27 show Qakbot’s dominance and subsequent downfall during Operation Duck Hunt.
Figure 26: Retrohunt Results for 2023
64
Made with FlippingBook - PDF hosting