TA577 Now Focusing on NT LAN Manager Authentication Theft

Proofpoint Spots Recent Changes in Cyber Tactics for Black Basta-Affiliated Group
A cyber threat actor is shifting tactics from conventional malware delivery to a targeted focus on acquiring NT LAN Manager authentication information to potentially collect sensitive data and perform other malicious actions. The campaigns have targeted hundreds of organizations globally.

acquiring actions actor authentication basta black basta campaigns collect cyber cyber threat data delivery focus information lan malicious malware manager organizations proofpoint sensitive sensitive data tactics theft threat threat actor