## Overview
Following the successful phishing attack, QBot malware has been executed. QBot is known for its use in banking fraud but is also utilized to create a foothold in systems for ransomware deployment.

## Key Indicators
- **Process Activity**: Unusual process creation linked to QBot binaries.
- **Network Activity**: Communication with command and control servers.

## Next Steps
With QBot active, the focus shifts to establishing persistence. This often involves manipulating system registries or scheduled tasks to ensure malware survives reboots.