QBot Trojan operators are using new tactics in their campaign to hijack legitimate email conversations to steal sensitive data from the victims. Delivered by spam messages that contain URLs to .ZIP files that serve content designed to download the payload from one of six hardcoded encrypted URLs. WESTprotect recommends that you be wary of unexpected emails that contain links or attachments.