Black Basta’s Evolving Tactics and the Rising Role of LLMs in Cyber Attack

Black Basta, a highly active extortion/ransomware gang, continues to evolve beyond traditional phishing by using advanced social engineering and tools like "TeamsPhisher" to spread malware via collaboration platforms such as Microsoft Teams; the temporary disruption of Qakbot altered their operations. The report also warns that state-linked actors (Forest Blizzard, Emerald Sleet) and other cybercriminals are beginning to leverage large language models to refine phishing, code development, and vulnerability discovery, increasing the sophistication and potential impact of future campaigns.