QakBot Returns, Locking Out Active Directory Accounts Posted on June 6, 2017 by Simon Steed QakBot, a worm-like, information-stealing strain of malware is back and locking users out of their Active Directory accounts.