Black Basta ransomware poses as IT support on Microsoft Teams to breach networks

In Data Breach News
October 25, 2024

Some groups have really honed their social engineering skills. Bleeping Computer reports on Black Basta:

The BlackBasta ransomware operation has moved its social engineering attacks to Microsoft Teams, posing as corporate help desks contacting employees to assist them with an ongoing spam attack.

Black Basta is a ransomware operation active since April 2022 and responsible for hundreds of attacks against corporations worldwide.

After the Conti cybercrime syndicate shut down in June 2022 following a series of embarrassing data breaches, the operation split into multiple groups, with one of these factions believed to be Black Basta.

Black Basta members breach networks through various methods, including vulnerabilitiespartnering wish malware botnets, and social engineering.

Read more at Bleeping Computer.