{"id":2390,"date":"2022-07-24T19:35:39","date_gmt":"2022-07-25T02:35:39","guid":{"rendered":"https:\/\/www.karlstechnology.com\/blog\/?p=2390"},"modified":"2022-07-24T19:38:05","modified_gmt":"2022-07-25T02:38:05","slug":"windows-calculator-used-with-malware","status":"publish","type":"post","link":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/","title":{"rendered":"Windows Calculator Used with Malware"},"content":{"rendered":"\n<p>This just shows how attackers will utilize anything and any way possible to spread malware.<\/p>\n\n\n\n<p>People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with devious viruses.<\/p>\n\n\n\n<p>Windows malware QBot, also known as Qakbot, started out as a banking Trojan, but evolved into a malware-dropper. Cobalt Strike beacons are dropped in the early phases of a ransomware campaign.<\/p>\n\n\n\n<p>ProxyLife, a security expert, found out Qakbot has been utilizing DLL side-loading attacks against the Windows 7 Calculator software as far back as July 11th.<\/p>\n\n\n\n<p>The most important tip to remember is to keep your <a href=\"https:\/\/www.karlstechnology.com\/blog\/why-update-windows-10\/\" target=\"_blank\" rel=\"noreferrer noopener\">PC up to date<\/a>. <\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<p>If you are needing help with malware issues, please give us a call at\u00a0<a href=\"tel:1-800-620-5285\">1-800-620-5285<\/a>. \u00a0Karls Technology is a nationwide computer service company with offices in many\u00a0major cities. \u00a0This blog post is brought to you by our staff at\u00a0the\u00a0<a href=\"https:\/\/www.lasvegascomputerrepairservice.com\/\"><strong>Las Vegas Computer Repair Service<\/strong><\/a>. If you need\u00a0<a href=\"https:\/\/www.lasvegascomputerrepairservice.com\/\">computer repair in Las Vegas, NV<\/a>\u00a0please call the local office at\u00a0<a href=\"tel:702-800-7850\">(702) 800-7850<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This just shows how attackers will utilize anything and any way possible to spread malware. People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with devious viruses. Windows malware QBot, also known as Qakbot, started out as a banking Trojan, but evolved into a malware-dropper. Cobalt Strike beacons [&hellip;]<\/p>\n","protected":false},"author":22392,"featured_media":579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[69],"class_list":["post-2390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-computerrepair","tag-hackers"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Windows Calculator Used with Malware - Computer Repair Blog<\/title>\n<meta name=\"description\" content=\"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Windows Calculator Used with Malware - Computer Repair Blog\" \/>\n<meta property=\"og:description\" content=\"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\" \/>\n<meta property=\"og:site_name\" content=\"Computer Repair Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/karlstechnology\" \/>\n<meta property=\"article:published_time\" content=\"2022-07-25T02:35:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-25T02:38:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"629\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kristin Willis\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kristin Willis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\"},\"author\":{\"name\":\"Kristin Willis\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/bc979de85e31552def2c5917dfc51b2d\"},\"headline\":\"Windows Calculator Used with Malware\",\"datePublished\":\"2022-07-25T02:35:39+00:00\",\"dateModified\":\"2022-07-25T02:38:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\"},\"wordCount\":172,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png\",\"keywords\":[\"hackers\"],\"articleSection\":[\"Computer Repair\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\",\"url\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\",\"name\":\"Windows Calculator Used with Malware - Computer Repair Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png\",\"datePublished\":\"2022-07-25T02:35:39+00:00\",\"dateModified\":\"2022-07-25T02:38:05+00:00\",\"description\":\"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage\",\"url\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png\",\"contentUrl\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png\",\"width\":1200,\"height\":629},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.karlstechnology.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Windows Calculator Used with Malware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#website\",\"url\":\"https:\/\/www.karlstechnology.com\/blog\/\",\"name\":\"Computer Repair Blog\",\"description\":\"Karls Technology Computer Repair\",\"publisher\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.karlstechnology.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#organization\",\"name\":\"Karls Technology\",\"url\":\"https:\/\/www.karlstechnology.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/04\/karlstechnology.png\",\"contentUrl\":\"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/04\/karlstechnology.png\",\"width\":800,\"height\":99,\"caption\":\"Karls Technology\"},\"image\":{\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/karlstechnology\",\"https:\/\/x.com\/karlstechnology\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/bc979de85e31552def2c5917dfc51b2d\",\"name\":\"Kristin Willis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9274e0fd36a71af1da9f3c53500479b6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9274e0fd36a71af1da9f3c53500479b6?s=96&d=mm&r=g\",\"caption\":\"Kristin Willis\"},\"sameAs\":[\"https:\/\/www.karlstechnology.com\"],\"url\":\"https:\/\/www.karlstechnology.com\/blog\/author\/kristin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Windows Calculator Used with Malware - Computer Repair Blog","description":"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/","og_locale":"en_US","og_type":"article","og_title":"Windows Calculator Used with Malware - Computer Repair Blog","og_description":"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.","og_url":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/","og_site_name":"Computer Repair Blog","article_publisher":"https:\/\/www.facebook.com\/karlstechnology","article_published_time":"2022-07-25T02:35:39+00:00","article_modified_time":"2022-07-25T02:38:05+00:00","og_image":[{"width":1200,"height":629,"url":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png","type":"image\/png"}],"author":"Kristin Willis","twitter_misc":{"Written by":"Kristin Willis","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#article","isPartOf":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/"},"author":{"name":"Kristin Willis","@id":"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/bc979de85e31552def2c5917dfc51b2d"},"headline":"Windows Calculator Used with Malware","datePublished":"2022-07-25T02:35:39+00:00","dateModified":"2022-07-25T02:38:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/"},"wordCount":172,"commentCount":0,"publisher":{"@id":"https:\/\/www.karlstechnology.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png","keywords":["hackers"],"articleSection":["Computer Repair"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/","url":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/","name":"Windows Calculator Used with Malware - Computer Repair Blog","isPartOf":{"@id":"https:\/\/www.karlstechnology.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage"},"image":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png","datePublished":"2022-07-25T02:35:39+00:00","dateModified":"2022-07-25T02:38:05+00:00","description":"People behind the QBot malware have been utilizing the Windows Calculator to infect machines already infected with the malicious payload.","breadcrumb":{"@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#primaryimage","url":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png","contentUrl":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/08\/My-Post-7.png","width":1200,"height":629},{"@type":"BreadcrumbList","@id":"https:\/\/www.karlstechnology.com\/blog\/windows-calculator-used-with-malware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.karlstechnology.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Windows Calculator Used with Malware"}]},{"@type":"WebSite","@id":"https:\/\/www.karlstechnology.com\/blog\/#website","url":"https:\/\/www.karlstechnology.com\/blog\/","name":"Computer Repair Blog","description":"Karls Technology Computer Repair","publisher":{"@id":"https:\/\/www.karlstechnology.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.karlstechnology.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.karlstechnology.com\/blog\/#organization","name":"Karls Technology","url":"https:\/\/www.karlstechnology.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/04\/karlstechnology.png","contentUrl":"https:\/\/www.karlstechnology.com\/blog\/wp-content\/uploads\/2019\/04\/karlstechnology.png","width":800,"height":99,"caption":"Karls Technology"},"image":{"@id":"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/karlstechnology","https:\/\/x.com\/karlstechnology"]},{"@type":"Person","@id":"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/bc979de85e31552def2c5917dfc51b2d","name":"Kristin Willis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.karlstechnology.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9274e0fd36a71af1da9f3c53500479b6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9274e0fd36a71af1da9f3c53500479b6?s=96&d=mm&r=g","caption":"Kristin Willis"},"sameAs":["https:\/\/www.karlstechnology.com"],"url":"https:\/\/www.karlstechnology.com\/blog\/author\/kristin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/posts\/2390"}],"collection":[{"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/users\/22392"}],"replies":[{"embeddable":true,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/comments?post=2390"}],"version-history":[{"count":2,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/posts\/2390\/revisions"}],"predecessor-version":[{"id":2392,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/posts\/2390\/revisions\/2392"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/media\/579"}],"wp:attachment":[{"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/media?parent=2390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/categories?post=2390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.karlstechnology.com\/blog\/wp-json\/wp\/v2\/tags?post=2390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}