ReliaQuest Uncovers New Black Basta Social Engineering Technique

**Executive Summary:** ReliaQuest observed an active Black Basta campaign that escalates social engineering by flooding targets with email, then contacting them via compromised Microsoft Teams tenants and QR-code phishing to coerce installation of RMM tools (AnyDesk/QuickAssist), resulting in credential theft (LSASS access, Impacket/secretsdump) and Cobalt Strike beaconing; the report includes IoCs, detection guidance for Teams and QR-based phishing, and mitigation recommendations.