Every now and then a new malware variant appears as a swift reminder that the security stakes are always rising. The QakBot/Pinkslipbot banking Trojan is one of them. The malware, not content with harvesting banking credentials, can now linger and act as a control server — long after a security product stops its original purpose.