QakBot has shifted its tactics to now use password protected zip files to evade detection. The Menlo platform prevented this attack by blocking the archive file in the Isolation Core.
