THREATOPS

THREAT OPS › Threat News › 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

medmssticPublished 2026-08-04

<aside class="table-of-contents-block accordion wp-block-bloginabox-theme-table-of-contents" id="accordion-584ea111-0135-4799-8110-a2f85028f6e6"> <button class="btn btn-collapse" type="button"> <span class="table-of-contents-block__label">In this article</span> <span class="table-of-contents-block__current"></span>

MITRE ATT&CK techniques

Malicious FileT1204.002
Application Layer ProtocolT1071
System Binary Proxy ExecutionT1218
Modify RegistryT1112
Command and Scripting InterpreterT1059
MshtaT1218.005
User ExecutionT1204
Process DiscoveryT1057
Social MediaT1593.001
CredentialsT1589.001
Web ProtocolsT1071.001
Ingress Tool TransferT1105
Command and Scripting InterpreterAML.T0050
Process DiscoveryAML.T0089

Indicators of compromise

https://www.qigroup.com/business-focus/empowering-entrepreneurship/url
https://microsoft.github.io/zerotrustassessment/url

Original source: https://www.microsoft.com/en-us/security/blog/2026/08/04/129-seconds-disruption-microsoft-defender-stops-ransomware-qnet/