Black Basta Ransomware Group Affiliates Leveraging Windows Quick Assist for Initial Access

Since April 2024, Arctic Wolf has been tracking an ongoing campaign by Black Basta ransomware group affiliates leveraging Microsoft’s Quick Assist for initial access. The Black Basta affiliates have been conducting vishing (voice phishing) attacks by impersonating IT or help desk personnel, claiming they need to fix an issue on the victim’s device. In other … Black Basta Ransomware Group Affiliates Leveraging Windows Quick Assist for Initial Access

Article Link: Black Basta Ransomware Group Affiliates Leveraging Windows Quick …

access affiliates april arctic arctic wolf attacks basta black basta black basta ransomware campaign fix help desk impersonating initial access microsoft personnel phishing quick assist ransomware ransomware group tracking vishing voice voice phishing windows wolf