Since April 2024, Arctic Wolf has been tracking an ongoing campaign by Black Basta ransomware group affiliates leveraging Microsoft’s Quick Assist for initial access. The Black Basta affiliates have been conducting vishing (voice phishing) attacks by impersonating IT or help desk personnel, claiming they need to fix an issue on the victim’s device. In other … Black Basta Ransomware Group Affiliates Leveraging Windows Quick Assist for Initial Access
Article Link: Black Basta Ransomware Group Affiliates Leveraging Windows Quick Assist for Initial Access - Arctic Wolf