Threat video1:00
Quantum Systems QBase Update Malware: Detection & IOCs
A QBase ground-control update reportedly carried malware to Bundeswehr servers; hunt it with 9 detection rules, 11 IOCs and a free Splunk SPL rule.
Read the full threat intel for Quantum Systems QBase Update Malware: Detection & IOCs →
Chapters
- 0:00The hookReported malware grounded Bundeswehr drones after an update.
- 0:05The storyQuantum Systems detected a cyberattack.
- 0:12Attack pathMalware was reported in a QBase update.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromiseNo malicious indicators were published.
- 0:37MITRE ATT&CK techniques3 ATT&CK techniques, from resource development to initial access.
- 0:43Remediation3 steps now: Customers running QBase.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Reported malware grounded Bundeswehr drones after an update.
0:05Quantum Systems detected a cyberattack.
0:08The Bundeswehr grounded its drones as a precaution.
0:13Malware was reported in a QBase update.
0:15It reached German military servers and other customers.
0:19The vendor says the threat was contained.
0:21The drones were not directly infected.
0:27No threat actor is attributed. Confidence: low.
0:32No malicious indicators were published.
0:383 ATT&CK techniques, from resource development to initial access.
0:433 steps now: Customers running QBase.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.